In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
There is a BUG: KASAN: stack-out-of-bounds in set_mesh_sync due to memcpy from badly declared on-stack flexible array.
Another crash is in set_mesh_complete() due to double list_del via mgmt_pending_valid + mgmt_pending_remove.
Use DEFINE_FLEX to declare the flexible array right, and don't memcpy outside bounds.
As mgmt_pending_valid removes the cmd from list, use mgmt_pending_free, and also report status on error.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-aws-6.17Upgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-6.17Upgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-azure-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-raspi-6.17Upgrade linux-image-realtime-6.17Upgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-virtual-6.17Upgrade linux-image-genericUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-gcp-6.17Upgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-generic-64k-6.17Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-azureUpgrade linux-image-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-6.17Upgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-aws-64k-6.17Upgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-oem-6.17Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.17.0-1007-awsUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-6.17.0-14-generic | Feb 13, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub