EIP-2026-102910

This exploit targets a vulnerability in the Linux kernel Bluetooth stack (versions < 2.6.11.5) to achieve local privilege escalation by overflowing a protocol number and brute-forcing kernel memory to overwrite a function pointer with shellcode.