Bluetooth Memory Management Issue in Linux Kernel by The Linux Foundation

CVE-2026-68389

What is CVE-2026-68389?

The Linux Kernel has a reported vulnerability in its Bluetooth subsystem, specifically within the hci_qca component. This issue arises when the qca_controller_memdump function allocates memory for qca_memdump but fails to properly manage the state upon receiving an invalid dump size. When a zero dump size is reported by the controller, the corresponding memory is freed without clearing the qca_memdump pointer. This can lead to scenarios where later processes utilize this freed memory, potentially causing system instability or crashes. Moreover, this mishandling may block other processes relying on dump handling, leaving them waiting indefinitely. Proper memory management practices should be observed to avoid such vulnerabilities.

References