CVE-2026-31500 Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock

🗓️ 22 Apr 2026 13:54:21Reported by LinuxType

Bluetooth btintel fixes a data race by serializing hardware error with the lock to prevent use-after-free.

Reporter	Title	Published	Views	Family All 30
CBLMariner	CVE-2026-31500 affecting package kernel for versions less than 6.6.134.1-2	3 May 202620:52	–	cbl_mariner
Circl	CVE-2026-31500	22 Apr 202615:24	–	circl
CNNVD	Linux kernel 安全漏洞	22 Apr 202600:00	–	cnnvd
CVE	CVE-2026-31500	22 Apr 202613:54	–	cve
Debian	[SECURITY] [DSA 6238-1] linux security update	30 Apr 202620:05	–	debian
Debian CVE	CVE-2026-31500	22 Apr 202613:54	–	debiancve
Tenable Nessus	Debian dsa-6238 : ata-modules-6.12.74+deb13+1-armmp-di - security update	30 Apr 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-31500	22 Apr 202600:00	–	nessus
EUVD	EUVD-2026-24876	22 Apr 202615:31	–	euvd
Mageia	Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities	4 May 202616:05	–	mageia

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/bluetooth/btintel.c"
    ],
    "versions": [
      {
        "version": "973bb97e5aee56edddaae3d5c96877101ad509c0",
        "lessThan": "7e041d0aad1d4d43d921ace052e04f4e2cacaed3",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "973bb97e5aee56edddaae3d5c96877101ad509c0",
        "lessThan": "5f84e845648dfa86e42de5487f1a774b42f0444d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "973bb97e5aee56edddaae3d5c96877101ad509c0",
        "lessThan": "e10a4cb72468686ffbe8bb2b0520e37f6be1a0c5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "973bb97e5aee56edddaae3d5c96877101ad509c0",
        "lessThan": "66696648af477dc87859e5e4b607112f5f29d010",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "973bb97e5aee56edddaae3d5c96877101ad509c0",
        "lessThan": "f7d84737663ad4a120d2d8ef1561a4df91282c2e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "973bb97e5aee56edddaae3d5c96877101ad509c0",
        "lessThan": "94d8e6fe5d0818e9300e514e095a200bd5ff93ae",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/bluetooth/btintel.c"
    ],
    "versions": [
      {
        "version": "4.3",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.3",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.131",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.80",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.21",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.19.11",
        "lessThanOrEqual": "6.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/f7d84737663ad4a120d2d8ef1561a4df91282c2e
git	www.git.kernel.org/stable/c/e10a4cb72468686ffbe8bb2b0520e37f6be1a0c5
git	www.git.kernel.org/stable/c/66696648af477dc87859e5e4b607112f5f29d010
git	www.git.kernel.org/stable/c/5f84e845648dfa86e42de5487f1a774b42f0444d
git	www.git.kernel.org/stable/c/7e041d0aad1d4d43d921ace052e04f4e2cacaed3
git	www.git.kernel.org/stable/c/94d8e6fe5d0818e9300e514e095a200bd5ff93ae

01 Jun 2026 16:11Current

EPSS0.00015