CVE-2026-31499: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() l2cap_conn_del() calls cancel_delayed_work_sync() for both info_timer and id_addr_timer while holding conn->lock. However, the work functions l2cap_info_timeout() and l2cap_conn_update_id_addr() both acquire conn->lock, creating a potential AB-BA deadlock if the work is already executing when l2cap_conn_del() takes the lock. Move the work cancellations before acquiring conn->lock and use disable_delayed_work_sync() to additionally prevent the works from being rearmed after cancellation, consistent with the pattern used in hci_conn_del().

Засегнати продукти

• Linux Linux: f87271d21dd4ee83857ca11b94e7b4952749bbae преди f7f35a4f7fd574f5889bb2e4b397e14cbb83f6da; ab4eedb790cae44313759b50fe47da285e2519d5 преди 3f26ecbd9cde621dd94be7ef252c7210b965a5c7; ab4eedb790cae44313759b50fe47da285e2519d5 преди d008460de352e534f6721de829b093368564ec66; ab4eedb790cae44313759b50fe47da285e2519d5 преди 00fdebbbc557a2fc21321ff2eaa22fd70c078608; efc30877bd4bc85fefe98d80af60fafc86e5775e; 18ab6b6078fa8191ca30a3065d57bf35d5635761; 6.12.20 преди 6.12.88; 6.6.84 преди 6.7; 6.13.8 преди 6.14
• Linux Linux: 6.14; преди 6.14; 6.12.88 до 6.12.*; 6.18.21 до 6.18.*; 6.19.11 до 6.19.*; от 7.0 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-31499
• https://nvd.nist.gov/vuln/detail/CVE-2026-31499
• https://git.kernel.org/stable/c/f7f35a4f7fd574f5889bb2e4b397e14cbb83f6da
• https://git.kernel.org/stable/c/3f26ecbd9cde621dd94be7ef252c7210b965a5c7
• https://git.kernel.org/stable/c/d008460de352e534f6721de829b093368564ec66
• https://git.kernel.org/stable/c/00fdebbbc557a2fc21321ff2eaa22fd70c078608