Firmware Management Flaw in Linux Kernel Bluetooth Drivers

CVE-2026-43069

What is CVE-2026-43069?

A firmware management issue has been discovered in the Linux kernel's Bluetooth drivers. This vulnerability arises in the function responsible for downloading firmware. If an attempt to request firmware is successful, but the content returned is invalid (such as being empty or zero-sized), the function exits without properly releasing the allocated firmware resources. This oversight leads to a resource leak, which can degrade system performance over time. To mitigate this issue, it is essential to implement a check that invokes the release_firmware() function before returning when an invalid firmware content is detected.

References