Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-31511

Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete This fixes the condition checking so mgmt_pending_valid is executed whenever status != -ECANCELED otherwise calling mgmt_pending_free(cmd) would kfree(cmd) without unlinking it from the list first, leaving a dangling pointer. Any subsequent list traversal (e.g., mgmt_pending_foreach during __mgmt_power_off, or another mgmt_pending_valid call) would dereference freed memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0b60eb04b8524e1b4b3f07fea0d16fda9a677d9a to < 2074dfffad76981ca451cb7fc98703d04ac562feaffected
  • d71b98f253b079cbadc83266383f26fe7e9e103b to < 340666172cf747de58c283d2eef1f335f050538baffected
  • 302a1f674c00dd5581ab8e493ef44767c5101aab to < bafec9325d4de26b6c49db75b5d5172de652aae0affected
  • 302a1f674c00dd5581ab8e493ef44767c5101aab to < 3a89c33deffb3cb7877a7ea2e50734cd12b064f2affected
  • 302a1f674c00dd5581ab8e493ef44767c5101aab to < 5f5fa4cd35f707344f65ce9e225b6528691dbbaaaffected
  • 87a1f16f07c6c43771754075e08f45b41d237421affected
  • 6.12.59 to < 6.12.80affected
  • 6.16.10 to < 6.17affected

Linux Linux

Default version status: affected

  • 6.17affected
  • 0 to < 6.17unaffected
  • 6.12.80 to ≤ 6.12.*unaffected
  • 6.18.21 to ≤ 6.18.*unaffected
  • 6.19.11 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References