Bluetooth Vulnerability in Linux Kernel Affecting Resource Management

CVE-2026-43022

What is CVE-2026-43022?

A vulnerability in the Linux kernel's Bluetooth implementation has been identified that affects the function hci_cmd_sync_queue_once(). This function is responsible for managing commands in the Bluetooth command queue. The flaw allowed the function to improperly indicate whether a command had been successfully added to the queue, leading to potential resource leaks. The function has now been modified to return an -EEXIST error code if an attempt is made to add a duplicate item to the queue, ensuring proper resource handling and callback execution. This fix enhances the stability and security of the Bluetooth functionality in the Linux kernel.

References