Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-63974

Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close Since hci_dev_close_sync() can now be called during the reset path, we should also set HCI_CMD_DRAIN_WORKQUEUE. This avoids queuing timeouts while the hdev workqueue is being drained.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 877afadad2dce8aae1f2aad8ce47e072d4f6165e to < ccf07dfb9d7d1e2c7a1eeb782f90d9b614ebba9caffected
  • 877afadad2dce8aae1f2aad8ce47e072d4f6165e to < 7b81c1378b79c3143ca3fdb3d18ac0f01cbabb21affected
  • 877afadad2dce8aae1f2aad8ce47e072d4f6165e to < 9cebe4680bb9a72f80c6541eb24af06db7a1fbc9affected
  • 877afadad2dce8aae1f2aad8ce47e072d4f6165e to < 47330cc875b36a1cf7b3543cb2cf90a7c603ce0eaffected
  • 877afadad2dce8aae1f2aad8ce47e072d4f6165e to < 60bceb9a4c693e68cc90ba4b2dfb9e000e8638ffaffected
  • 877afadad2dce8aae1f2aad8ce47e072d4f6165e to < 525daaea459fc215f432de1b8debbd9144bf97b0affected
  • 4bf367fa1fefabdf14938d0ac9ed60020389112eaffected
  • 3b382555706558f5c0587862b6dc03e96a252bbaaffected
  • 5.18.18 to < 5.19affected
  • 5.19.2 to < 5.20affected

Linux Linux

Default version status: affected

  • 6.0affected
  • 0 to < 6.0unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.93 to ≤ 6.12.*unaffected
  • 6.18.35 to ≤ 6.18.*unaffected
  • 7.0.12 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References