PT-2026-36439 · Linux · Linux Kernel

CVE-2026-43022

·

Published

2026-03-25

·

Updated

2026-08-30

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the Bluetooth component where the hci cmd sync queue once() function fails to indicate whether a queue item was added. This prevents the caller from knowing if callbacks are executed, which can lead to resource leaks. The fix involves modifying the function to return -EEXIST when a queue item already exists and updating all callsites to handle this return value.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Release of Resource after Effective Lifetime

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-85374
BDU:2026-06500
CVE-2026-43022
OESA-2026-2869
OESA-2026-3157
OPENSUSE-SU-2026:21388-1
SUSE-SU-2026:22521-1
SUSE-SU-2026:22522-1
SUSE-SU-2026:22665-1
SUSE-SU-2026:22666-1
SUSE-SU-2026:22742-1
SUSE-SU-2026:22769-1
SUSE-SU-2026:22812-1
SUSE-SU-2026:22835-1
SUSE-SU-2026:2799-1
SUSE-SU-2026:2800-1

Affected Products

Linux Kernel