A high-severity vulnerability in the Linux kernel Bluetooth management subsystem allows a buffer overflow via an oversized encryption size (enc_size) in Long Term Keys (LTK). This occurs because the enc_size value is used to size stack operations without proper validation, potentially leading to memory corruption. The issue has been resolved by rejecting oversized enc_size values during LTK record validation.