In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
hci_conn lookup and field access must be covered by hdev lock in
set_cig_params_sync, otherwise it's possible it is freed concurrently.
Take hdev lock to prevent hci_conn from being deleted or modified
concurrently. Just RCU lock is not suitable here, as we also want to
avoid "tearing" in the configuration.
References
Configurations
Configuration 1 (hide)
|
History
08 May 2026, 14:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/66d432e9b45bae7881ffcdb12cd8fd0bf254ef02 - Patch | |
| References | () https://git.kernel.org/stable/c/7d568fede8eac91161a60b710aa920abe9b0fb9f - Patch | |
| References | () https://git.kernel.org/stable/c/a2639a7f0f5bf7d73f337f8f077c19415c62ed2c - Patch | |
| References | () https://git.kernel.org/stable/c/bad65b4b0a96139f023eadc28a33125963208449 - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.5.3:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.4.16:*:*:*:*:*:*:* |
|
| CWE | CWE-416 | |
| First Time |
Linux linux Kernel
Linux |
03 May 2026, 07:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
01 May 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-01 15:16
Updated : 2026-05-08 14:35
NVD link : CVE-2026-43019
Mitre link : CVE-2026-43019
CVE.ORG link : CVE-2026-43019
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-416
Use After Free