135 matches found
SUSE CVE-2024-42132
In the Linux kernel, the following vulnerability has been resolved: bluetooth/hci: disallow setting handle bigger than HCICONNHANDLEMAX Syzbot hit warning in hciconndel caused by freeing handle that was not allocated using ida allocator. This is caused by handle bigger than HCICONNHANDLEMAX passe...
AZL-68108 CVE-2024-38620 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Remove HCIAMP support Since BTHS has been remove HCIAMP controllers no longer has any use so remove it along with the capability of creating AMP controllers. Since we no longer need to differentiate between AMP an...
UBUNTU-CVE-2024-38620
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Remove HCIAMP support Since BTHS has been remove HCIAMP controllers no longer has any use so remove it along with the capability of creating AMP controllers. Since we no longer need to differentiate between AMP an...
USN-6701-4 linux-azure vulnerabilities
Ruihan Li discovered that the bluetooth subsystem in the Linux kernel did not properly perform permissions checks when handling HCI sockets. A physically proximate attacker could use this to cause a denial of service bluetooth communication. CVE-2023-2002 It was discovered that the NVIDIA Tegra...
CVE-2023-43540 Buffer Copy Without Checking Size of Input in Bluetooth HOST
Memory corruption while processing the IOCTL FM HCI WRITE request...
CVE-2023-43540 Buffer Copy Without Checking Size of Input in Bluetooth HOST
Memory corruption while processing the IOCTL FM HCI WRITE request...
CVE-2023-28588 Integer Overflow or Wraparound in Bluetooth Host
Transient DOS in Bluetooth Host while rfc slot allocation...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from an integer overflow or wrap-around in Bluetooth Host...
USN-6520-1 linux-starfive-6.2 vulnerabilities
Ivan D Barrera, Christopher Bednarz, Mustafa Ismail, and Shiraz Saleem discovered that the InfiniBand RDMA driver in the Linux kernel did not properly check for zero-length STAG or MR registration. A remote attacker could possibly use this to execute arbitrary code. CVE-2023-25775 Yu Hao and...
USN-6465-3 linux-gke vulnerabilities
Yu Hao and Weiteng Chen discovered that the Bluetooth HCI UART driver in the Linux kernel contained a race condition, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2023-31083 Lin Ma discovered that the Netlink...
USN-6465-2 linux-raspi vulnerabilities
Yu Hao and Weiteng Chen discovered that the Bluetooth HCI UART driver in the Linux kernel contained a race condition, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service system crash. CVE-2023-31083 Lin Ma discovered that the Netlink...
Kernel: bluetooth: Unauthorized management command execution
A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hcisock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth...
CVE-2023-21667
Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard...
Code injection
Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard...
CVE-2023-21667
CVE-2023-21667 describes a transient DoS in the Bluetooth HOST when passing a descriptor to validate a blacklisted Bluetooth keyboard. The vulnerability is referenced in Qualcomm’s Bluetooth context (QC-CR#3306293) and appears in multiple feeds (NVD and Red Hat entries) with a base CVSS v3.1 scor...
CVE-2023-21667 Buffer Over-read in Bluetooth HOST
Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard...
PT-2023-18329 · Unknown · Bluetooth Host
Name of the Vulnerable Software and Affected Versions: Bluetooth HOST affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the Bluetooth HOST. It occurs when passing a descriptor to validate a blacklisted Bluetooth keyboard. There is no...
CVE-2022-40503
Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming...
CVE-2022-40503
CVE-2022-40503 is a buffer over-read vulnerability in the Bluetooth Host during A2DP streaming, described as information disclosure. It affects Qualcomm components (Bluetooth) and is referenced in Qualcomm security bulletins; public details appear in NVD and Red Hat/CVE cross references. Remediat...