{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-43119",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-43119",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-05-06T07:40:43.257Z",
    "updatedAt": "2026-07-24T14:33:34.175Z",
    "importedAt": "2026-10-24T01:58:08.712Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "Bluetooth: hci_sync: annotate data-races around hdev->req_status",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sync: annotate data-races around hdev->req_status\n\n__hci_cmd_sync_sk() sets hdev->req_status under hdev->req_lock:\n\n    hdev->req_status = HCI_REQ_PEND;\n\nHowever, several other functions read or write hdev->req_status without\nholding any lock:\n\n  - hci_send_cmd_sync() reads req_status in hci_cmd_work (workqueue)\n  - hci_cmd_sync_complete() reads/writes from HCI event completion\n  - hci_cmd_sync_cancel() / hci_cmd_sync_cancel_sync() read/write\n  - hci_abort_conn() reads in connection abort path\n\nSince __hci_cmd_sync_sk() runs on hdev->req_workqueue while\nhci_send_cmd_sync() runs on hdev->workqueue, these are different\nworkqueues that can execute concurrently on different CPUs. The plain\nC accesses constitute a data race.\n\nAdd READ_ONCE()/WRITE_ONCE() annotations on all concurrent accesses\nto hdev->req_status to prevent potential compiler optimizations that\ncould affect correctness (e.g., load fusing in the wait_event\ncondition or store reordering).",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "f80c5dad7b6467b884c445ffea45985793b4b2d0",
              "status": "affected",
              "versionType": "git",
              "lessThan": "e51042ddc0b20d9bda5eb6dcf85a2668f9c5dae4"
            },
            {
              "version": "f80c5dad7b6467b884c445ffea45985793b4b2d0",
              "status": "affected",
              "versionType": "git",
              "lessThan": "6e539907c0d11f514c5e0b049b27b04dff48a5b1"
            },
            {
              "version": "f80c5dad7b6467b884c445ffea45985793b4b2d0",
              "status": "affected",
              "versionType": "git",
              "lessThan": "a7a1cdb4a64ca74eb95cc46648fccb8cd3f9af27"
            },
            {
              "version": "f80c5dad7b6467b884c445ffea45985793b4b2d0",
              "status": "affected",
              "versionType": "git",
              "lessThan": "40734ce8efc34c4a0d0222855798c0dc14b65f2e"
            },
            {
              "version": "f80c5dad7b6467b884c445ffea45985793b4b2d0",
              "status": "affected",
              "versionType": "git",
              "lessThan": "b6807cfc195ef99e1ac37b2e1e60df40295daa8c"
            },
            {
              "version": "8603d49906b231bbcd9141db7d096fa1041bc379",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "0e061885bfcd65ef5d09f154f3c3c3491cc7544a",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "a3d50fb7ce931f08a2c6194fdc4c9a56c9ed4153",
              "status": "affected",
              "versionType": "git"
            },
            {
              "version": "4.19.47",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "4.20"
            },
            {
              "version": "5.0.20",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.1"
            },
            {
              "version": "5.1.6",
              "status": "affected",
              "versionType": "semver",
              "lessThan": "5.2"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "5.2",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "5.2"
            },
            {
              "version": "6.6.145",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.83",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.18.24",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "version": "6.19.14",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.19.*"
            },
            {
              "version": "7.0",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}