CVE-2026-63974
HIGH
MEDIUM
Priority: 0.03
BB Relevance:
63/100
Published: 2026-07-19
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Adjacent
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Adjacent
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close Since hci_dev_close_sync() can now be called during the reset path, we should also set HCI_CMD_DRAIN_WORKQUEUE. This avoids queuing timeouts while the hdev workqueue is being drained.
Weakness Classification (1)
Affected Software (11)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 877afadad2dce8aae1f2aad8ce47e072d4f6165e < ccf07dfb9d7d1e2c7a1eeb782f90d9b614ebba9c |
| Linux | Linux | 877afadad2dce8aae1f2aad8ce47e072d4f6165e < 7b81c1378b79c3143ca3fdb3d18ac0f01cbabb21 |
| Linux | Linux | 877afadad2dce8aae1f2aad8ce47e072d4f6165e < 9cebe4680bb9a72f80c6541eb24af06db7a1fbc9 |
| Linux | Linux | 877afadad2dce8aae1f2aad8ce47e072d4f6165e < 47330cc875b36a1cf7b3543cb2cf90a7c603ce0e |
| Linux | Linux | 877afadad2dce8aae1f2aad8ce47e072d4f6165e < 60bceb9a4c693e68cc90ba4b2dfb9e000e8638ff |
| Linux | Linux | 877afadad2dce8aae1f2aad8ce47e072d4f6165e < 525daaea459fc215f432de1b8debbd9144bf97b0 |
| Linux | Linux | 4bf367fa1fefabdf14938d0ac9ed60020389112e |
| Linux | Linux | 3b382555706558f5c0587862b6dc03e96a252bba |
| Linux | Linux | 5.18.18 < 5.19 |
| Linux | Linux | 5.19.2 < 5.20 |
| Linux | Linux | 6.0 |