SECURITY ANNOUNCEMENT

CVE-2026-99010

23 October 2026

rfcomm_process_dlcs() keeps granting credits, so the remote keeps sending and the leak keeps growing. Free the skb, as the tty side does.

Introduced

2.6.121da177e4c3f41524e886b7f1b8a0c1fc7321cac2

6.12.113c3f76b025cbbb0ab47310dbe7de18092d89f2a99

6.18.574f46de658ce61968aef5ea7ae809d1c180330544

6.6.160a54ce160e3ef7e50ec94e0ac4131c3d0f9f739b9

7.2.11b8814161b14c610b7a09527433301d8ad8180aef

7.39d1afbf60ed53c5b051cd124153e0ae3078c8b93