In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close

Since hci_dev_close_sync() can now be called during the reset path, we
should also set HCI_CMD_DRAIN_WORKQUEUE. This avoids queuing timeouts
while the hdev workqueue is being drained.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.002.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
877afadad2dce8aae1f2aad8ce47e072d4f6165e affected < 9cebe4680bb9a72f80c6541eb24af06db7a1fbc9
877afadad2dce8aae1f2aad8ce47e072d4f6165e affected < 47330cc875b36a1cf7b3543cb2cf90a7c603ce0e
877afadad2dce8aae1f2aad8ce47e072d4f6165e affected < 60bceb9a4c693e68cc90ba4b2dfb9e000e8638ff
877afadad2dce8aae1f2aad8ce47e072d4f6165e affected < 525daaea459fc215f432de1b8debbd9144bf97b0
4bf367fa1fefabdf14938d0ac9ed60020389112e affected —
3b382555706558f5c0587862b6dc03e96a252bba affected —
5.18.18 affected < 5.19
5.19.2 affected < 5.20
Linux Linux affected
Version Status Constraints
6.0 affected —
0 unaffected < 6.0
6.12.93 unaffected ≤ 6.12.*
6.18.35 unaffected ≤ 6.18.*
7.0.12 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/47330cc875b36a1cf7b3543cb2cf90a7c603ce0e cve-icon
https://git.kernel.org/stable/c/525daaea459fc215f432de1b8debbd9144bf97b0 cve-icon
https://git.kernel.org/stable/c/60bceb9a4c693e68cc90ba4b2dfb9e000e8638ff cve-icon
https://git.kernel.org/stable/c/9cebe4680bb9a72f80c6541eb24af06db7a1fbc9 cve-icon
History

Mon, 20 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Sun, 19 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close Since hci_dev_close_sync() can now be called during the reset path, we should also set HCI_CMD_DRAIN_WORKQUEUE. This avoids queuing timeouts while the hdev workqueue is being drained.
Title Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-20T13:41:58.081Z

Reserved: 2026-07-19T07:54:57.024Z

Link: CVE-2026-63974

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.