High severity7.8NVD Advisory· Published Apr 22, 2026· Updated May 17, 2026
CVE-2026-31511
CVE-2026-31511
Description
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete
This fixes the condition checking so mgmt_pending_valid is executed whenever status != -ECANCELED otherwise calling mgmt_pending_free(cmd) would kfree(cmd) without unlinking it from the list first, leaving a dangling pointer. Any subsequent list traversal (e.g., mgmt_pending_foreach during __mgmt_power_off, or another mgmt_pending_valid call) would dereference freed memory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.12.59,<6.12.80
- cpe:2.3:o:linux:linux_kernel:6.17:-:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
5- git.kernel.org/stable/c/340666172cf747de58c283d2eef1f335f050538bnvdPatch
- git.kernel.org/stable/c/3a89c33deffb3cb7877a7ea2e50734cd12b064f2nvdPatch
- git.kernel.org/stable/c/5f5fa4cd35f707344f65ce9e225b6528691dbbaanvdPatch
- git.kernel.org/stable/c/bafec9325d4de26b6c49db75b5d5172de652aae0nvdPatch
- git.kernel.org/stable/c/2074dfffad76981ca451cb7fc98703d04ac562fenvd
News mentions
0No linked articles in our index yet.