PT-2026-34416 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-06-05 · CVE-2026-31511

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A dangling pointer issue exists in the Bluetooth MGMT component. The problem occurs during the execution of mgmt add adv patterns monitor complete when the condition checking fails to properly execute mgmt pending valid for statuses other than -ECANCELED. This leads to mgmt pending free(cmd) calling kfree(cmd) without first unlinking it from the list. Consequently, subsequent list traversals, such as mgmt pending foreach during mgmt power off or other mgmt pending valid calls, may dereference freed memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-31511

OESA-2026-2581

Affected Products

Linux Kernel

References · 118

• https://nvd.nist.gov/vuln/detail/CVE-2025-23145 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31398 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31698 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23473 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-71239 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31628 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31467 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23102 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31532 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-71094 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43148 · Security Note
• https://ubuntu.com/security/CVE-2026-31511 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31518 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31452 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31496 · Security Note