PT-2026-36439

CVE-2026-43022

·

Published

2026-03-25

·

Updated

2026-10-18

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the Bluetooth component where the hci cmd sync queue once() function fails to indicate whether a queue item was added. This prevents the caller from knowing if callbacks are executed, which can lead to resource leaks. The fix involves modifying the function to return -EEXIST when a queue item already exists and updating all callsites to handle this return value.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
AZL-85374
OESA-2026-2869
OESA-2026-3157
OPENSUSE-SU-2026:21388-1
SUSE-SU-2026:22521-1
SUSE-SU-2026:22522-1
SUSE-SU-2026:22665-1
SUSE-SU-2026:22666-1
SUSE-SU-2026:22742-1
SUSE-SU-2026:22769-1
SUSE-SU-2026:22812-1
SUSE-SU-2026:22835-1
SUSE-SU-2026:2799-1
SUSE-SU-2026:2800-1
USN-8886-1
Found an issue in the description? Have something to add? Feel free to write us 👾