CVE-2026-78117

The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hciinfineonpsoc6bless.c stored the outgoing HCI packet descriptor in a file-scope variable, static cystcblehcitxpacketinfot hcitxpkt. psoc6blesssend cleared and populated that descriptor's packetType, dataLength and data fields before...

CVE-2026-78117 Race condition on shared HCI TX descriptor in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the air

The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hciinfineonpsoc6bless.c stored the outgoing HCI packet descriptor in a file-scope variable, static cystcblehcitxpacketinfot hcitxpkt. psoc6blesssend cleared and populated that descriptor's packetType, dataLength and data fields before...

CVE-2026-78117

The Infineon PSOC 6 BLESS HCI driver (specifically in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c) is vulnerable to a race condition due to the use of a file-scope variable, static cy_stc_ble_hci_tx_packet_info_t hci_tx_pkt, to store outgoing HCI packet descriptors. Because psoc6_bless_send(...