news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-63974

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
8.8 High
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.32%
Risk score
21.2
Published
2026-07-19
Status
Awaiting Analysis

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close Since hci_dev_close_sync() can now be called during the reset path, we should also set HCI_CMD_DRAIN_WORKQUEUE. This avoids queuing timeouts while the hdev workqueue is being drained.

Coverage 5

Advisories and references