Memory Safety Vulnerability in Linux Kernel Bluetooth Management

CVE-2026-43059

What is CVE-2026-43059?

A vulnerability in the Bluetooth management functionality of the Linux kernel has been addressed, which could lead to list corruption and memory safety problems. This arises from improper handling in completion handlers after a command is processed. Specifically, changes made to facilitate the validation of pending commands introduced potential use-after-free (UAF) issues during command handling. The recent patch ensures that commands are correctly unlinked from the pending list, preventing double deletions and protecting the integrity of memory operations.

References