oob-write 2

• Two Bytes and a Broadcast: Zero-Click BLE-to-Root on Linux 6.6 Sep 30, 2026
• An Android Bluetooth ISO out-of-bounds write that lands RIP on `commit_creds`, marked Infeasible by Google ASR Jun 11, 2026