Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95147.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-95147
Upstream
Published
2026-08-10T12:17:21Z
Modified
2026-08-31T05:26:27Z
Summary
CVE-2026-68085 affecting package kernel 6.6.150.1-1
Details

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hciuart: clear HCIUARTSENDING when writework is canceled

HCIUARTSENDING bit in txstate means writework is pending and blocks queueing it again. Currently this bit is not cleared when canceling the work in hciuartclose(), which blocks future writes when device is reopened later if write_work was pending.

Fix by clearing HCIUARTSENDING when canceling the work.

Also make clearing of txskb safe by using disableworksync + enablework instead of just cancelworksync. hciuartflush() purges the proto tx queue so we can cancel the pending writework there, instead of doing it just in hciuart_close(). Re-enable and possibly requeue the work after queue flush.

References

Affected packages

Azure Linux:3 / kernel

Package

Name
kernel
Purl
pkg:rpm/azure-linux/kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
6.6.150.1-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95147.json"