This vulnerability is a race condition in the RFCOMM module of the Linux kernel that can result in a use‑after‑free of a listener socket. The bug is triggered when an incoming connection is processed while the listener socket is closed and freed by another thread, leading to kernel memory corruption that can cause a crash or, in the worst case, allow an attacker to execute arbitrary code with kernel privileges. The weakness is reflected by CWE‑364 (Race Condition) and CWE‑416 (Use‑After‑Free).

All Linux kernel releases that contain the Bluetooth RFCOMM stack and have not incorporated the CVE‑2026‑53256 fix are potentially affected. The CPE list identifies the kernel broadly (cpe:2.3:o:linux:linux_kernel) and specific versions such as 2.6.12 and 7.1 rc1‑rc6, but the vulnerability applies to any kernel that uses the relevant RFCOMM listener implementation at the time of the patch merge.

The CVSS score of 8 indicates a high severity use‑after‑free bug. The EPSS score is below 1%, suggesting current exploitation attempts are rare, and the vulnerability is not included in the CISA KEV catalog. Exploitation would most likely require the attacker to trigger the race condition by initiating an RFCOMM connection from a Bluetooth device while a listening socket is being closed. This scenario implies that a remote Bluetooth attacker can potentially cause a kernel crash or gain elevated privileges, but the exact impact depends on the specific kernel configuration and exploitation techniques.