https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 10:54:47 +0000 https://vulnerability.circl.lu/vuln/cve-2026-31499 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()</p> <p>l2cap_conn_del() calls cancel_delayed_work_sync() for both info_timer and id_addr_timer while holding conn-&gt;lock. However, the work functions l2cap_info_timeout() and l2cap_conn_update_id_addr() both acquire conn-&gt;lock, creating a potential AB-BA deadlock if the work is already executing when l2cap_conn_del() takes the lock.</p> <p>Move the work cancellations before acquiring conn-&gt;lock and use disable_delayed_work_sync() to additionally prevent the works from being rearmed after cancellation, consistent with the pattern used in hci_conn_del().</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()</p> <p>l2cap_conn_del() calls cancel_delayed_work_sync() for both info_timer and id_addr_timer while holding conn-&gt;lock. However, the work functions l2cap_info_timeout() and l2cap_conn_update_id_addr() both acquire conn-&gt;lock, creating a potential AB-BA deadlock if the work is already executing when l2cap_conn_del() takes the lock.</p> <p>Move the work cancellations before acquiring conn-&gt;lock and use disable_delayed_work_sync() to additionally prevent the works from being rearmed after cancellation, consistent with the pattern used in hci_conn_del().</p> https://vulnerability.circl.lu/vuln/cve-2026-31499