PT-2026-36439 · Linux · Linux

Published 2026-05-01 · Updated 2026-05-01 · CVE-2026-43022

Mitre

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci sync: hci cmd sync queue once() return -EEXIST if exists

hci cmd sync queue once() needs to indicate whether a queue item was added, so caller can know if callbacks are called, so it can avoid leaking resources.

Change the function to return -EEXIST if queue item already exists.

Modify all callsites to handle that.

Related Identifiers

CVE-2026-43022

Affected Products

Linux

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-43022 · Security Note
• https://git.kernel.org/stable/c/2969554bcfccb5c609f6b6cd4a014933f3a66dd0 · Note
• https://git.kernel.org/stable/c/0ad2ce230b38cd4b3f6732cc609e270461e626e5 · Note