CVE-2026-98295: Bluetooth: coredump: Quiesce dump work on unregister

Published Oct 6, 2026

Updated

Bluetooth: coredump: Quiesce dump work on unregister

Affected Software

1 affected component

Linux Linux kernel

Event History

Oct 6, 2026

CVE Published

via MITRE·08:45 AM

Data Sourced

via MITRE·08:45 AM

Description

Data Sourced

via NVD·09:18 AM

Description

Oct 7, 2026

Data Sourced

via Microsoft·08:22 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which systems are exposed to this issue?

Linux kernel systems using Bluetooth coredump processing are exposed when a Bluetooth controller is disconnected or unregistered while a coredump is active. The affected path involves active dump timeout work or queued dump packets that can outlive the Bluetooth device.

What timing is required to trigger the vulnerability?

Coredump processing must be active, with dump work armed or packets queued, when the Bluetooth device is unregistered and released. The remaining work can then access the freed hdev structure.

CVE-2026-98295: Bluetooth: coredump: Quiesce dump work on unregister

Affected Software

Event History

Frequently Asked Questions

Which systems are exposed to this issue?

What timing is required to trigger the vulnerability?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What timing is required to trigger the vulnerability?