Bluetooth: hci_event: move wake reason storage into validated event handlers
CVE-2026-31771 is fixed in 17 products on 1 platform, first by DEBIAN-CVE-2026-31771, released May 15, 2026. It is not reported as exploited. Patch Radar priority: High.
The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1266290). - CVE-2025-68324: scsi: imm: Fix use-after-free bug caused by unfinished delayed work (bsc#1255416). - CVE-2026-23392: netfilter: nf_tables: release flowtable after rcu grace period on error (bsc#1260531). - CVE-2026-31500: Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock (bsc#1262993). - CVE-2026-31697: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed (bsc#1264116). - CVE-2026-31698: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed (bsc#1263880). - CVE-2026-31699: crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed (bsc#1263879). - CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076). - CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145). - CVE-2026-43023: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137). - CVE-2026-43074: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263). - CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470). - CVE-2026-43198: tcp: fix potential race in tcp_v6_syn_recv_sock() (bsc#1264610). - CVE-2026-45878: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (bsc#1266767). - CVE-2026-45886: bpf: Fix bpf_xdp_store_bytes proto for read-only arg (bsc#1266810). - CVE-2026-45932: bpf: Fix tcx/netkit detach permissions when prog fd isn't given (bsc#1266827). - CVE-2026-45984: gfs2: Move the inode glock locking to gfs2_file_buffered_write (bsc#1267214). - CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267361). - CVE-2026-46090: ALSA: aloop: Use guard() for spin locks (bsc#1267531). - CVE-2026-46120: ip6_gre: Use cached t->net in ip6erspan_changelink() (bsc#1267640). - CVE-2026-46123: Bluetooth: virtio_bt: clamp rx length before skb_put (bsc#1267621). - CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267387). - CVE-2026-46159: btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak (bsc#1267652). - CVE-2026-46197: drm/amdkfd: validate SVM ioctl nattr against buffer size (bsc#1267381). - CVE-2026-46209: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (bsc#1267663). - CVE-2026-46227: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (bsc#1267697). - CVE-2026-46273: ibmveth: Disable GSO for packets with small MSS (bsc#1265211 bsc#1267651). The following non security issues were fixed: - bnxt_en: Fix NULL pointer dereference (bsc#1268307). - Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs (git-fixes). - ethtool: provide customized dim profile management (bsc#1261256). - hv: utils: handle and propagate errors in kvp_register (git-fixes). - hyperv: Clean up and fix the guest ID comment in hvgdk.h (git-fixes). - linux/dim: move useful macros to .h file (bsc#1261256). - net: ethtool: add ethtool COALESCE_RX_CQE_FRAMES/NSECS (bsc#1261256). - net: mana: Add ethtool counters for RX CQEs in coalesced type (bsc#1261256). - net: mana: Add support for RX CQE Coalescing (bsc#1261256).
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| dtb-aarch64 · opensuse-leap 16.0 | 6.12.0-160000.36.1 | OPENSUSE-SU-2026:21388-1 | Jul 21, 2026 |
| kernel-64kb · opensuse-leap 16.0 | 6.12.0-160000.36.1 | OPENSUSE-SU-2026:21388-1 | Jul 21, 2026 |
| kernel-64kb · sles 15.7 | 6.4.0-150700.53.66.1 | SUSE-SU-2026:2800-1 | Jul 8, 2026 |
| kernel-64kb · sles 16.0 | 6.12.0-160000.36.1 | SUSE-SU-2026:22835-1 | Jul 21, 2026 |
| kernel-azure · opensuse-leap 16.0 | 6.12.0-160000.36.1 | OPENSUSE-SU-2026:21388-1 | Jul 21, 2026 |
| kernel-azure · sles 15.7 | 6.4.0-150700.53.66.1 | SUSE-SU-2026:2800-1 | Jul 8, 2026 |
| kernel-azure · sles 16.0 | 6.12.0-160000.36.1 | SUSE-SU-2026:22835-1 | Jul 21, 2026 |
| kernel-default · opensuse-leap 16.0 | 6.12.0-160000.36.1 | OPENSUSE-SU-2026:21388-1 | Jul 21, 2026 |
| kernel-default · sles 15.6 | 6.4.0-150600.23.118.1 | SUSE-SU-2026:2632-1 | Jun 25, 2026 |
| kernel-default · sles 15.7 | 6.4.0-150700.53.66.1 | SUSE-SU-2026:2800-1 | Jul 8, 2026 |
| kernel-default · sles 16.0 | 6.12.0-160000.36.1 | SUSE-SU-2026:22835-1 | Jul 21, 2026 |
| kernel-default-base · opensuse-leap 16.0 | 6.12.0-160000.36.1.160000.2.17 | OPENSUSE-SU-2026:21388-1 | Jul 21, 2026 |
| kernel-default-base · sles 15.6 | 6.4.0-150600.23.118.1.150600.12.56.1 | SUSE-SU-2026:2632-1 | Jun 25, 2026 |
| kernel-default-base · sles 15.7 | 6.4.0-150700.53.66.1.150700.17.39.1 | SUSE-SU-2026:2800-1 | Jul 8, 2026 |
| kernel-default-base · sles 16.0 | 6.12.0-160000.36.1.160000.2.17 | SUSE-SU-2026:22835-1 | Jul 21, 2026 |
| kernel-docs · opensuse-leap 16.0 | 6.12.0-160000.36.1 | OPENSUSE-SU-2026:21388-1 | Jul 21, 2026 |
| kernel-docs · sles 15.6 | 6.4.0-150600.23.118.1 | SUSE-SU-2026:2632-1 | Jun 25, 2026 |
| kernel-docs · sles 15.7 | 6.4.0-150700.53.66.2 | SUSE-SU-2026:2800-1 | Jul 8, 2026 |
| kernel-docs · sles 16.0 | 6.12.0-160000.36.1 | SUSE-SU-2026:22835-1 | Jul 21, 2026 |
| kernel-kvmsmall · opensuse-leap 16.0 | 6.12.0-160000.36.1 | OPENSUSE-SU-2026:21388-1 | Jul 21, 2026 |
| kernel-kvmsmall · sles 16.0 | 6.12.0-160000.36.1 | SUSE-SU-2026:22835-1 | Jul 21, 2026 |
| kernel-livepatch-SLE15-SP6_Update_28 · sles 15.6 | 1-150600.13.3.1 | SUSE-SU-2026:2632-1 | Jun 25, 2026 |
| kernel-livepatch-SLE15-SP7-RT_Update_17 · sles 15.7 | 1-150700.1.3.1 | SUSE-SU-2026:2799-1 | Jul 8, 2026 |
| kernel-livepatch-SLE15-SP7_Update_18 · sles 15.7 | 1-150700.15.3.1 | SUSE-SU-2026:2800-1 | Jul 8, 2026 |
| kernel-obs-build · opensuse-leap 16.0 | 6.12.0-160000.36.1 | OPENSUSE-SU-2026:21388-1 | Jul 21, 2026 |
| kernel-obs-build · sles 15.6 | 6.4.0-150600.23.118.1 | SUSE-SU-2026:2632-1 | Jun 25, 2026 |
| kernel-obs-build · sles 15.7 | 6.4.0-150700.53.66.1 | SUSE-SU-2026:2800-1 | Jul 8, 2026 |
| kernel-obs-qa · opensuse-leap 16.0 | 6.12.0-160000.36.1 | OPENSUSE-SU-2026:21388-1 | Jul 21, 2026 |
| kernel-obs-qa · sles 16.0 | 6.12.0-160000.36.1 | SUSE-SU-2026:22835-1 | Jul 21, 2026 |
| kernel-rt · opensuse-leap 16.0 | 6.12.0-160000.36.1 | OPENSUSE-SU-2026:21388-1 | Jul 21, 2026 |
| kernel-source · opensuse-leap 16.0 | 6.12.0-160000.36.1 | OPENSUSE-SU-2026:21388-1 | Jul 21, 2026 |
| kernel-source · sles 15.6 | 6.4.0-150600.23.118.1 | SUSE-SU-2026:2632-1 | Jun 25, 2026 |
| kernel-source · sles 15.7 | 6.4.0-150700.53.66.1 | SUSE-SU-2026:2800-1 | Jul 8, 2026 |
| kernel-source · sles 16.0 | 6.12.0-160000.36.1 | SUSE-SU-2026:22835-1 | Jul 21, 2026 |
| kernel-syms · opensuse-leap 16.0 | 6.12.0-160000.36.1 | OPENSUSE-SU-2026:21388-1 | Jul 21, 2026 |
| kernel-syms · sles 15.6 | 6.4.0-150600.23.118.1 | SUSE-SU-2026:2632-1 | Jun 25, 2026 |
| kernel-syms · sles 15.7 | 6.4.0-150700.53.66.1 | SUSE-SU-2026:2800-1 | Jul 8, 2026 |
| kernel-syms · sles 16.0 | 6.12.0-160000.36.1 | SUSE-SU-2026:22835-1 | Jul 21, 2026 |
| kernel-zfcpdump · opensuse-leap 16.0 | 6.12.0-160000.36.1 | OPENSUSE-SU-2026:21388-1 | Jul 21, 2026 |
| kernel-zfcpdump · sles 15.7 | 6.4.0-150700.53.66.1 | SUSE-SU-2026:2800-1 | Jul 8, 2026 |
| kernel-zfcpdump · sles 16.0 | 6.12.0-160000.36.1 | SUSE-SU-2026:22835-1 | Jul 21, 2026 |
| linux · Debian 13.5 (trixie) | 6.12.115-2 | DEBIAN-CVE-2026-31771 | May 15, 2026 |
| linux · Debian 14 | 6.19.12-1 | DEBIAN-CVE-2026-31771 | May 15, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.