CVE-2026-31499

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()<br /> <br /> l2cap_conn_del() calls cancel_delayed_work_sync() for both info_timer<br /> and id_addr_timer while holding conn-&gt;lock. However, the work functions<br /> l2cap_info_timeout() and l2cap_conn_update_id_addr() both acquire<br /> conn-&gt;lock, creating a potential AB-BA deadlock if the work is already<br /> executing when l2cap_conn_del() takes the lock.<br /> <br /> Move the work cancellations before acquiring conn-&gt;lock and use<br /> disable_delayed_work_sync() to additionally prevent the works from<br /> being rearmed after cancellation, consistent with the pattern used in<br /> hci_conn_del().