CVE-2026-43322 in Linux
Resumen
por VulDB • 2026-05-21
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:
Bluetooth: hci_sync: Corrección de un Use-After-Free (UAF) en le_read_features_complete
Esto corrige la siguiente traza de pila (backtrace) causada por la liberación de hci_conn antes de le_read_features_complete pero después de hci_le_read_remote_features_sync, por lo que hci_conn_del -> hci_cmd_sync_dequeue no puede evitarlo:
================================================================== BUG: KASAN: slab-use-after-free in instrument_atomic_read_write include/linux/instrumented.h:96 [inline]
BUG: KASAN: slab-use-after-free in atomic_dec_and_test include/linux/atomic/atomic-arch-fallback.h:100 [inline]
BUG: KASAN: slab-use-after-free in kobject_put+0x1e7/0x590 lib/kobject.c:720 Read of size 4 at addr ffff888103998000 by task kworker/u8:1/5932
CPU: 1 PID: 5932 Comm: kworker/u8:1 Not tainted 6.12.0-rc4 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 Workqueue: hci0 hci_rx_work
If you want to get best quality of vulnerability data, you may have to visit VulDB.