Scheduled maintenance: Some features related to account registration and licensing may be temporarily unavailable from Friday (May 8) at 1 PM to Sunday (May 10) at 5 PM (PST).
HomeDefectsLIN1024-20392
Acknowledged

LIN1024-20392 : Security Advisory - linux - CVE-2026-43069

Created: May 5, 2026    Updated: May 7, 2026
Found In Version: 10.24.33.2
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: hci_ll: Fix firmware leak on error path  Smatch reports:  drivers/bluetooth/hci_ll.c:587 download_firmware() warn: 'fw' from request_firmware() not released on lines: 544.  In download_firmware(), if request_firmware() succeeds but the returned firmware content is invalid (no data or zero size), the function returns without releasing the firmware, resulting in a resource leak.  Fix this by calling release_firmware() before returning when request_firmware() succeeded but the firmware content is invalid.