Bluetooth Vulnerability in Linux Kernel Affects Multiple Releases

CVE-2026-63974

What is CVE-2026-63974?

A vulnerability within the Linux kernel impacts Bluetooth device management. Specifically, the handling of device closure during the reset path has been modified to ensure that the HCI_CMD_DRAIN_WORKQUEUE command is set when the hci_dev_close_sync() function is invoked. This adjustment is crucial in preventing potential queuing timeouts while draining the hdev workqueue, contributing to improved stability and performance when managing Bluetooth devices.

References