PT-2026-36435 · Linux · Linux Kernel

Published 2026-03-29 · Updated 2026-05-15 · CVE-2026-43018

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the Bluetooth component. In the hci le remote conn param req evt() function, the hci conn lookup and field access are not properly protected by the hdev lock, which may allow the connection object to be freed concurrently while in use.

Recommendations Extend the hci dev lock critical section to cover all conn usage.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-06508

CVE-2026-43018

ECHO-48EB-5012-E2FE

OESA-2026-2312

OESA-2026-2313

OESA-2026-2314

Affected Products

Linux Kernel

References · 46

• https://git.kernel.org/stable/c/b255531b27da336571411248c2a72a350662bd09 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31575 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43214 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43018 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-43018 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43018 · Vendor Advisory
• https://git.kernel.org/stable/c/ea3cd36d7382d5f8309df04c275d20df139ed42c · Patch
• https://osv.dev/vulnerability/OESA-2026-2313 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31625 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43017 · Security Note
• https://git.kernel.org/stable/c/1d0bdbfe3e91c11f0a704c52443a9446a10d699c · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-43018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31515 · Security Note
• https://bdu.fstec.ru/vul/2026-06508 · Security Note
• https://git.kernel.org/stable/c/5fb69e1eeea9d6cba80517e9f058b56b34bc3a81 · Patch