CVE-2026-43022

Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists

State: Published
Severity: Not scored
Published: May 1, 2026
Updated: Oct 30, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists

hci_cmd_sync_queue_once() needs to indicate whether a queue item was added, so caller can know if callbacks are called, so it can avoid leaking resources.

Change the function to return -EEXIST if queue item already exists.

Modify all callsites to handle that.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f00f36db76eb8fd10d13e80e2590f23b5beaa54d to before da531f7108218ab6a779861e4646562fc769c9b3Affected 1499f79995c7ee58e3bfeeff75f6d1b37dcda881 to before dfee8da127bafa46530b72347bce3ccae736296dAffected 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 to before 799e2e5fbf3f14874b5c6cc289a0dd68b2ca1979Affected 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 to before 5cfa4f537a056c91ac6c09bc3ab58a4455217df7Affected 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 to before 0ad2ce230b38cd4b3f6732cc609e270461e626e5Affected 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 to before 2969554bcfccb5c609f6b6cd4a014933f3a66dd0Affected 357603f4d396d85fbf0045512efaf1d7f7394ed7Affected 6.1.120 to before 6.1.191Affected 6.6.51 to before 6.6.160Affected 6.8.9 to before 6.9Affected
LinuxLinux	6.9Affected before 6.9Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.57 through 6.18.Not affected 6.19.12 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

f00f36db76eb8fd10d13e80e2590f23b5beaa54d to before da531f7108218ab6a779861e4646562fc769c9b3Affected
1499f79995c7ee58e3bfeeff75f6d1b37dcda881 to before dfee8da127bafa46530b72347bce3ccae736296dAffected
505ea2b295929e7be2b4e1bc86ee31cb7862fb01 to before 799e2e5fbf3f14874b5c6cc289a0dd68b2ca1979Affected
505ea2b295929e7be2b4e1bc86ee31cb7862fb01 to before 5cfa4f537a056c91ac6c09bc3ab58a4455217df7Affected
505ea2b295929e7be2b4e1bc86ee31cb7862fb01 to before 0ad2ce230b38cd4b3f6732cc609e270461e626e5Affected
505ea2b295929e7be2b4e1bc86ee31cb7862fb01 to before 2969554bcfccb5c609f6b6cd4a014933f3a66dd0Affected
357603f4d396d85fbf0045512efaf1d7f7394ed7Affected
6.1.120 to before 6.1.191Affected
6.6.51 to before 6.6.160Affected
6.8.9 to before 6.9Affected

LinuxLinux

6.9Affected
before 6.9Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.57 through 6.18.*Not affected
6.19.12 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.