The vulnerability of the qca_close() function in the drivers/bluetooth/hci_qca.c module of the Bluetooth device support driver for Linux operating systems allows a malicious actor to cause a service failure.

🗓️ 25 Mar 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

The qca_close() vulnerability in the Linux Bluetooth driver can cause a service failure due to improper resource cleanup.

Reporter	Title	Published	Views	Family All 50
AstraLinux	Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15	19 Jun 202611:10	–	astralinux
Circl	CVE-2022-49555	3 Dec 202514:14	–	circl
CNNVD	Linux kernel 安全漏洞	26 Feb 202500:00	–	cnnvd
CVE	CVE-2022-49555	26 Feb 202502:14	–	cve
Cvelist	CVE-2022-49555 Bluetooth: hci_qca: Use del_timer_sync() before freeing	26 Feb 202502:14	–	cvelist
Debian CVE	CVE-2022-49555	26 Feb 202502:14	–	debiancve
EUVD	EUVD-2022-54677	22 Oct 202518:30	–	euvd
NVD	CVE-2022-49555	26 Feb 202507:01	–	nvd
OpenVAS	SUSE: Security Advisory (SUSE-SU-2025:1293-1)	18 Apr 202500:00	–	openvas
OSV	CVE-2022-49555 Bluetooth: hci_qca: Use del_timer_sync() before freeing	26 Feb 202502:14	–	osv

Source	Link
git	www.git.kernel.org/stable/c/2717654ae022e6ea959a4b7b762702fe1a4690c2
git	www.git.kernel.org/stable/c/4989bb03342941f2b730b37dfa38bce27b543661
git	www.git.kernel.org/stable/c/db03727b4bbbbb36e6ef4cb655c670eefb6448e9
git	www.git.kernel.org/stable/c/37d17f63d085d601011964ade7371aeebeb6ed4b
cve	www.cve.org/CVERecord
lore	www.lore.kernel.org/linux-cve-announce/2025022616-CVE-2022-49555-64d2@gregkh/
git	www.git.kernel.org/linus/72ef98445aca568a81c2da050532500a8345ad3a
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.120
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.45
kernel	www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17.13

25 Mar 2026 00:00Current

7High risk

Vulners AI Score7

CVSS 24.6

CVSS 35.5

EPSS0.00245

qca_close vulnerability linux bluetooth driver improper resource cleanup service failure