-

CVE-2026-98295

Bluetooth: coredump: Quiesce dump work on unregister

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: coredump: Quiesce dump work on unregister

hci_devcd_handle_pkt_init() arms dump_timeout and coredump producers
queue dump_rx without holding an hdev reference. Unregister leaves both
works live, so disconnecting during an active dump lets them access hdev
after hci_release_dev() frees it.

Shut down coredump processing during unregister. Close the producer gate
under dump_q.lock before disabling both works, then free the active buffer
and queued packets under hci_dev_lock. Serializing the gate with enqueue
prevents controller-specific workers from adding packets after the final
purge.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 9695ef876fd122cb7bbc04a4a93b8727d2e36bda
Version < 24af375d7d8aa5f698e4dc41317102f44114351a
Status affected
Version 9695ef876fd122cb7bbc04a4a93b8727d2e36bda
Version < dcaf10ef27f928568c25de3e9fc242e538de5c67
Status affected
Version 9695ef876fd122cb7bbc04a4a93b8727d2e36bda
Version < 82699d1b727ba5980b94f1eb8dc3d346f41b7c67
Status affected
Version 9695ef876fd122cb7bbc04a4a93b8727d2e36bda
Version < d236517c264e41dc09833c708ef23bccb7a91219
Status affected
Version deb8156ebe5cb63a5988e7f86cc46aa062527c2b
Status affected
Version 6.1.188
Version < 6.2
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.4
Status affected
Version 0
Version < 6.4
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.54
Status unaffected
Version <= 7.2.*
Version 7.2.8
Status unaffected
Version <= *
Version 7.3-rc4
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.064
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/24af375d7d8aa5f698e4dc41317102f44114351a
https://git.kernel.org/stable/c/dcaf10ef27f928568c25de3e9fc242e538de5c67
https://git.kernel.org/stable/c/82699d1b727ba5980b94f1eb8dc3d346f41b7c67
https://git.kernel.org/stable/c/d236517c264e41dc09833c708ef23bccb7a91219