CVE-2026-43019: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hciconn: fix potential UAF in setcigparamssync
hciconn lookup and field access must be covered by hdev lock in setcigparamssync, otherwise it's possible it is freed concurrently.
Take hdev lock to prevent hciconn from being deleted or modified concurrently. Just RCU lock is not suitable here, as we also want to avoid "tearing" in the configuration.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43019?
CVE-2026-43019 has a medium severity rating due to the potential use-after-free vulnerability it introduces.
What systems are affected by CVE-2026-43019?
CVE-2026-43019 affects the Linux kernel specifically in its Bluetooth implementation.
How do I fix CVE-2026-43019?
To fix CVE-2026-43019, update to the latest version of the Linux kernel that includes the patch for this vulnerability.
What kind of vulnerability is CVE-2026-43019?
CVE-2026-43019 is categorized as a use-after-free vulnerability in Bluetooth handling in the Linux kernel.
Is there a known exploit for CVE-2026-43019?
As of now, there are no public exploits specifically targeting CVE-2026-43019 reported.