CVE-2026-78117 zephyrproject CVE debrief

Who should care

Defenders responsible for Bluetooth host and device configurations that use the Infineon PSOC 6 BLESS Bluetooth driver should assess exposure and prioritize verifying and applying patches.

Why it matters

A race condition in the Infineon PSOC 6 BLESS Bluetooth driver can leak adjacent memory over the air. Defenders should prioritize verifying and applying patches and assessing exposure for Bluetooth host and device configurations that use this driver.

• Potential memory leaks and adjacent memory exposure over the air
• Verification of patch application and configuration is necessary
• Exposure assessment for Bluetooth host and device configurations using this driver is required

Technical summary

The Infineon PSOC 6 BLESS HCI driver stored the outgoing HCI packet descriptor in a file-scope variable. The driver's serializing semaphore did not protect the shared state that the Bluetooth host read. Most transmissions are funneled through the cooperative TX-processor work queue, but some calls bypass this queue and can cause a race condition. This can lead to potential memory leaks and adjacent memory exposure over the air. Defenders should prioritize verifying and applying patches and assessing exposure for Bluetooth host and device configurations that use this driver.

Defensive priority

Defenders should prioritize verifying and applying patches for the Infineon PSOC 6 BLESS Bluetooth driver. Bluetooth host and device configurations that use this driver should be assessed for exposure.

Recommended defensive actions

• Verify and apply patches for the Infineon PSOC 6 BLESS Bluetooth driver
• Assess Bluetooth host and device configurations that use this driver for exposure
• Monitor for potential memory leaks and adjacent memory exposure over the air
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and source item provide details on the vulnerability. The Infineon PSOC 6 BLESS HCI driver's use of a file-scope variable for the outgoing HCI packet descriptor and the lack of protection for the shared state by the driver's serializing semaphore are key factors in the vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.