Riskcovery

CVE-2026-43021

Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails

State
Published
Severity
Not scored
Published
May 1, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails

When hci_cmd_sync_queue_once() returns with error, the destroy callback will not be called.

Fix leaking references / memory on these failures.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a106e50be74b0896583f4d010a69f9806e4194f4 to before 7fd74178d4b16dcf47179da634ea9d7c02e3608bAffected
  • a106e50be74b0896583f4d010a69f9806e4194f4 to before aca377208e7f7322bf4e107cdec6e7d7e8aa7a88Affected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 6.19.12 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.