PT-2026-37429 · Linux · Linux Kernel

Published 2026-05-06 · Updated 2026-05-29 · CVE-2026-43119

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A data race exists in the Bluetooth component involving the hdev->req status variable. While hci cmd sync sk() modifies this variable under the hdev->req lock, other functions—including hci send cmd sync(), hci cmd sync complete(), hci cmd sync cancel(), hci cmd sync cancel sync(), and hci abort conn()—access it without holding a lock. Because these functions can execute concurrently on different CPUs across different workqueues, these plain C accesses create a data race. This can lead to undefined behavior due to compiler optimizations such as store reordering or load fusing in wait conditions.

Recommendations Apply the updates that implement READ ONCE() and WRITE ONCE() annotations on all concurrent accesses to the hdev->req status variable.

Fix

Related Identifiers

CVE-2026-43119

OESA-2026-2493

OESA-2026-2494

OESA-2026-2495

Affected Products

Linux Kernel

References · 52

• https://osv.dev/vulnerability/BELL-CVE-2026-43119 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43261 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23317 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43053 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-43119 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31503 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2494 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43492 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43381 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43223 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2495 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23374 · Security Note
• https://git.kernel.org/stable/c/40734ce8efc34c4a0d0222855798c0dc14b65f2e · Patch
• https://git.kernel.org/stable/c/b6807cfc195ef99e1ac37b2e1e60df40295daa8c · Patch
• https://ubuntu.com/security/CVE-2026-43119 · Vendor Advisory