THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-11368 (HIGH 7.1) — The Bluetooth host ATT layer (subsys/bluetooth/host/att.c) associates each in-flight ATT TX buffer with its owning channel via the static tx_meta_data_storage[] array (data->att_chan = chan). When a buffer's last reference is dropped, its net-buf destroy callback defers the compl

[NVD] CVE-2026-11368 (HIGH 7.1) — The Bluetooth host ATT layer (subsys/bluetooth/host/att.c) associates each in-flight ATT TX buffer with its owning channel via the static tx_meta_data_storage[] array (data->att_chan = chan). When a buffer's last reference is dropped, its net-buf destroy callback defers the compl

mednvdPublished 2026-08-04

CVE-2026-11368 CVSS: 7.1 HIGH Published: 2026-08-04T15:16:24.843

The Bluetooth host ATT layer (subsys/bluetooth/host/att.c) associates each in-flight ATT TX buffer with its owning channel via the static tx_meta_data_storage[] array (data->att_chan = chan). When a buffer's last reference is dropped, its net-buf destroy callback defers the completion handling to the system workqueue (att_tx_destroy

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-11368