CVE-2026-43019

A flaw was found in the Linux kernel's Bluetooth component. Improper synchronization in the set_cig_params_sync function can lead to a use-after-free (UAF) vulnerability. This issue arises when hci_conn objects are accessed without proper locking, allowing them to be freed concurrently. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code.

set_cig_params_sync could race connection teardown and touch freed HCI connection state. Red Hat recommends patched kernels for LE Audio / CIG users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the bluetooth module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.