CVE-2026-93209

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Bluetooth component where Bluetooth enablement fails intermittently with a timeout error. The problem occurs because the hci send cmd sync() function uses skb clone() to copy a sent command into hdev->req skb to locate the completion callback. Under memory pressure, skb clone() can fail, leaving hdev->req skb as NULL. Consequently, when the firmware replies, the hci req cmd complete() function cannot find the required information, preventing hci cmd sync complete() from being called and causing the waiter in hci cmd sync sk() to time out. This issue was initially identified as a use-after-free in ttyport close() when ttyport open() failed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.