CVE-2026-99091

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix status of pending commands flushed on power off cmdcompletersp receives a struct cmdlookup and, for a pending command that has no cmdcomplete callback, falls through to cmdstatusrspcmd, data. cmdstatusrsp rea...

CVE-2026-99091 Bluetooth: MGMT: Fix status of pending commands flushed on power off

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix status of pending commands flushed on power off cmdcompletersp receives a struct cmdlookup and, for a pending command that has no cmdcomplete callback, falls through to cmdstatusrspcmd, data. cmdstatusrsp rea...

EUVD-2026-109897

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix status of pending commands flushed on power off cmdcompletersp receives a struct cmdlookup and, for a pending command that has no cmdcomplete callback, falls through to cmdstatusrspcmd, data. cmdstatusrsp rea...

CVE-2026-99091

The Linux kernel Bluetooth MGMT component contains a vulnerability where pending commands flushed during a power off event are incorrectly answered with a success status (0x00 ) instead of the intended status (e.g., MGMT_STATUS_NOT_POWERED or MGMT_STATUS_INVALID_INDEX ). The issue stems from cmd_...