Medium 5.5Published May 1, 2026

CVE-2026-43022Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists

Updated under an hour ago (Oct 27, 2026, 1:20 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists hci_cmd_sync_queue_once() needs to indicate whether a queue item was added, so caller can know if callbacks are called, so it can avoid leaking resources. Change the function to return -EEXIST if queue item already exists. Modify all callsites to handle that.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1499f79995c7ee58e3bfeeff75f6d1b37dcda881 before dfee8da127bafa46530b72347bce3ccae736296d; from 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 before 799e2e5fbf3f14874b5c6cc289a0dd68b2ca1979; 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 builds before 5cfa4f537a056c91ac6c09bc3ab58a4455217df7; 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 builds before 0ad2ce230b38cd4b3f6732cc609e270461e626e5; from 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 before 2969554bcfccb5c609f6b6cd4a014933f3a66dd0; f00f36db76eb8fd10d13e80e2590f23b5beaa54d; 357603f4d396d85fbf0045512efaf1d7f7394ed7; from 6.6.51 before 6.6.160; and 2 more ranges	CNA record
linux linux_kernel linux:linux_kernel	from 6.9 before 6.19.12; 6.1.120; 6.6.51; 6.8.9; 7.0; 7.0; 7.0; 7.0; and 2 more ranges	NVD

References

References

https://git.kernel.org/stable/c/dfee8da127bafa46530b72347bce3ccae736296d
https://git.kernel.org/stable/c/799e2e5fbf3f14874b5c6cc289a0dd68b2ca1979
https://git.kernel.org/stable/c/5cfa4f537a056c91ac6c09bc3ab58a4455217df7
https://git.kernel.org/stable/c/0ad2ce230b38cd4b3f6732cc609e270461e626e5	patch
https://git.kernel.org/stable/c/2969554bcfccb5c609f6b6cd4a014933f3a66dd0	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.