VulnSocial

CVE-2026-43019General(linux / linux_kernel)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync hci_conn lookup and field access must be covered by hdev lock in set_cig_params_sync, otherwise it's possible it is freed concurrently. Take hdev lock to prevent hci_conn from being deleted or modified concurrently. Just RCU lock is not suitable here, as we also want to avoid "tearing" in the configuration.

linux CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Other references
Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
linux
Products
linux_kernel

3 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-05-11: 1Technical Details · 2026-05-11: 105-11
Signal classification1 categories
General
1100.0%
Referenced assets1 URL
Full discourse1 post
  • WindowsForum@windowsforum
    General

    🚨 CVE-2026-43019 is a Linux Bluetooth UAF, but the real lesson is Windows “estate” realities: if your stack touches Linux, Microsoft can’t patch the other side. UAFs = chaos. #Windows #Security https://windowsforum.com/threads/cve-2026-43019-linux-bluetooth-use-after-free-fixes-risk-and-windows-estate-lessons.417470/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #LinuxKernel #BluetoothSecurity #Cve202643019 #WslAndHybridIt https://t.co/nLzrNSGVL8

    Post summary

    The tweet points out that CVE-2026-43019 is a Linux Bluetooth UAF and discusses cross‑stack implications, but it offers no proof of exploitation, tool details, patch info, or claims of false positivity.

    0000047
    1.1K followersView on X
CPE platform detail9 entries

9 of 9 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel6.4.16--
OSlinuxlinux_kernel6.5.3--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--

Explore more

Back to dashboardlinux CVEslinux_kernel vulnerabilities