AZL-85398
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-85398.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-85398
- Upstream
- Published
- 2026-05-01T15:16:46Z
- Modified
- 2026-08-29T05:27:27Z
- Summary
- CVE-2026-43019 affecting package kernel for versions less than 6.6.143.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hciconn: fix potential UAF in setcigparamssync
hciconn lookup and field access must be covered by hdev lock in setcigparamssync, otherwise it's possible it is freed concurrently.
Take hdev lock to prevent hci_conn from being deleted or modified concurrently. Just RCU lock is not suitable here, as we also want to avoid "tearing" in the configuration.
- References