PT-2026-36439 · Linux · Linux Kernel

Published 2026-03-25 · Updated 2026-05-26 · CVE-2026-43022

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Bluetooth component where the hci cmd sync queue once() function fails to indicate whether a queue item was added. This prevents the caller from knowing if callbacks are executed, which can lead to resource leaks. The fix involves modifying the function to return -EEXIST when a queue item already exists and updating all callsites to handle this return value.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

BDU:2026-06500

CVE-2026-43022

Affected Products

Linux Kernel

References · 16

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43022 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-43022 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-43022 · Vendor Advisory
• https://git.kernel.org/stable/c/2969554bcfccb5c609f6b6cd4a014933f3a66dd0 · Patch
• https://git.kernel.org/stable/c/0ad2ce230b38cd4b3f6732cc609e270461e626e5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43022 · Security Note
• https://ubuntu.com/security/CVE-2026-43022 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43022 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43022 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-43022 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06500 · Security Note
• https://docs.bell-sw.com/security/cves/CVE-2026-43022 · Note
• https://git.kernel.org/linus/2969554bcfccb5c609f6b6cd4a014933f3a66dd0 · Note
• https://t.me/cveNotify/162717 · Telegram Post
• https://access.redhat.com/security/cve/cve-2026-43022 · Note