CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hcisync: hcicmdsyncqueueonce() return -EEXIST if exists
hcicmdsyncqueueonce() needs to indicate whether a queue item was added, so caller can know if callbacks are called, so it can avoid leaking resources.
Change the function to return -EEXIST if queue item already exists.
Modify all callsites to handle that.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43022?
CVE-2026-43022 has a severity rating that requires attention due to potential impacts on Bluetooth functionality in the Linux kernel.
How do I fix CVE-2026-43022?
To fix CVE-2026-43022, update to the latest version of the Linux kernel that contains the patch for this vulnerability.
What systems are affected by CVE-2026-43022?
CVE-2026-43022 affects systems running vulnerable versions of the Linux kernel that handle Bluetooth operations.
What are the potential impacts of CVE-2026-43022?
The potential impacts of CVE-2026-43022 may include unexpected behavior in Bluetooth connectivity due to improper handling of command synchronization.
Is there a workaround for CVE-2026-43022?
There are no known effective workarounds for CVE-2026-43022, and applying the appropriate security patch is recommended.