PT-2026-36435 · Linux · Linux

Published 2026-05-01 · Updated 2026-05-01 · CVE-2026-43018

Mitre

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci event: fix potential UAF in hci le remote conn param req evt

hci conn lookup and field access must be covered by hdev lock in hci le remote conn param req evt, otherwise it's possible it is freed concurrently.

Extend the hci dev lock critical section to cover all conn usage.

Related Identifiers

CVE-2026-43018

Affected Products

Linux

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-43018 · Security Note
• https://git.kernel.org/stable/c/b255531b27da336571411248c2a72a350662bd09 · Note
• https://git.kernel.org/stable/c/5fb69e1eeea9d6cba80517e9f058b56b34bc3a81 · Note
• https://git.kernel.org/stable/c/1d0bdbfe3e91c11f0a704c52443a9446a10d699c · Note
• https://git.kernel.org/stable/c/59eecf0ffde15670e6a5e10c47be67f73d843b20 · Note
• https://git.kernel.org/stable/c/ea3cd36d7382d5f8309df04c275d20df139ed42c · Note
• https://git.kernel.org/stable/c/7cadb03be37e761130edb153544fe0770a842b19 · Note