CVE-2026-43022

Summary

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists

hci_cmd_sync_queue_once() needs to indicate whether a queue item was added, so caller can know if callbacks are called, so it can avoid leaking resources.

Change the function to return -EEXIST if queue item already exists.

Modify all callsites to handle that.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux505ea2b295929e7be2b4e1bc86ee31cb7862fb01 < 0ad2ce230b38cd4b3f6732cc609e270461e626e5affected
LinuxLinux505ea2b295929e7be2b4e1bc86ee31cb7862fb01 < 2969554bcfccb5c609f6b6cd4a014933f3a66dd0affected
LinuxLinuxf00f36db76eb8fd10d13e80e2590f23b5beaa54daffected
LinuxLinux1499f79995c7ee58e3bfeeff75f6d1b37dcda881affected
LinuxLinux357603f4d396d85fbf0045512efaf1d7f7394ed7affected
LinuxLinux6.1.120 < 6.2affected
LinuxLinux6.6.51 < 6.7affected
LinuxLinux6.8.9 < 6.9affected
LinuxLinux6.9affected
LinuxLinux0 < 6.9unaffected
LinuxLinux6.19.12 <= 6.19.*unaffected
LinuxLinux7.0 <= *unaffected

Weaknesses

References