CVE-2026-43322 is a use-after-free vulnerability in the Linux kernel's Bluetooth subsystem, specifically in the hci_sync component's le_read_features_complete function. The flaw occurs when an hci_conn object is freed prematurely, leading to a use-after-free condition detected by Kernel Address Sanitizer (KASAN). This vulnerability has a high severity score of 8.8 and impacts confidentiality, integrity, and availability.