Vulnerability in Linux Kernel Bluetooth Module - Potential Use After Free Issue

CVE-2026-43018

What is CVE-2026-43018?

A vulnerability exists in the Linux kernel Bluetooth subsystem that can lead to a Use After Free (UAF) condition. This occurs in the handling of the hci_le_remote_conn_param_req_evt event, where the connection lookup and access to certain fields may not be properly protected by the hdev lock. If the hdev lock is not held, it is possible that the connection can be freed while still being accessed, leading to potential exploitation. To mitigate this risk, the critical section for the hci_dev_lock has been extended to cover all usage of connections, ensuring that concurrent access does not lead to instability or security breaches in Bluetooth operations.

References