PT-2026-61291 · Linux · Linux

CVE-2026-63974 · Published 2026-07-19 · Updated 2026-07-19

NVD

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci sync: Set HCI CMD DRAIN WORKQUEUE during device close

Since hci dev close sync() can now be called during the reset path, we should also set HCI CMD DRAIN WORKQUEUE. This avoids queuing timeouts while the hdev workqueue is being drained.

Fix

Related Identifiers

CVE-2026-63974

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-63974 · Security Note
• https://git.kernel.org/stable/c/60bceb9a4c693e68cc90ba4b2dfb9e000e8638ff · Note
• https://git.kernel.org/stable/c/525daaea459fc215f432de1b8debbd9144bf97b0 · Note
• https://git.kernel.org/stable/c/9cebe4680bb9a72f80c6541eb24af06db7a1fbc9 · Note
• https://git.kernel.org/stable/c/47330cc875b36a1cf7b3543cb2cf90a7c603ce0e · Note