CVE-2026-43023

A flaw was found in the Linux kernel, specifically within its Bluetooth Synchronous Connection-Oriented (SCO) component. This vulnerability occurs due to race conditions when multiple connection attempts are made simultaneously on the same Bluetooth socket. This can lead to a use-after-free error, where the system attempts to use memory that has already been released. Exploitation of this flaw could result in system instability, causing the system to crash or become unresponsive, and potentially lead to a denial of service.

This vulnerability is rated as Moderate impact for Red Hat products because triggering the flaw requires local user access and precise race-condition timing on Bluetooth sockets, without remote exposure. Typical Red Hat Enterprise Linux server deployments do not enable or utilize Bluetooth hardware, which significantly curtails the real-world attack surface. In configurations where Bluetooth subsystems are operational, a local authenticated user could exploit this race condition to induce kernel memory corruption, resulting in a system crash or potential privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.