Bluetooth Management Vulnerability in Linux Kernel by Linux

CVE-2026-31511

What is CVE-2026-31511?

A security issue has been identified in the Bluetooth management component of the Linux Kernel, where improper handling of pointers can lead to a dangling pointer scenario. This vulnerability arises when the condition check for 'mgmt_pending_valid' is not executed correctly, particularly when the status is not '-ECANCELED'. As a result, if 'mgmt_pending_free(cmd)' is called, it may lead to the deallocation of memory without properly unlinking it from the list, creating a risk for subsequent memory accesses. This could allow for potential exploitation during list traversals, leading to dereferencing of freed memory, compromising system integrity.

References