PT-2026-44234 · Opensuse+1 · Opensuse Tumbleweed+1
CVE-2026-46111
·
Published
2026-05-28
·
Updated
2026-07-28
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1
Description
A use-after-free issue exists in the Bluetooth component. The
create big complete() function unconditionally dereferences the conn pointer during an error, which can be triggered via hci connect cfm() and hci conn del(). This occurs because the system fails to properly detect stale connections before proceeding with BIG creation and does not maintain the hci conn object's reference count across the asynchronous boundary.Recommendations
For Linux kernel, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Update openSUSE Tumbleweed to version kernel-devel-7.0.11-1.1.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Opensuse Tumbleweed