77 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-35967
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: SCO: Fix not validating setsockopt user input syzbot reported scosocksetsockopt is copying data without checking user input length. BUG: KASAN:...
Linux Distros Unpatched Vulnerability : CVE-2024-36011
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HCI: Fix potential null- ptr-deref Fix potential null-ptr-deref in...
CVE-2022-49202
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciuart: add missing NULL check in h5enqueue Syzbot hit general protection fault in pmruntimeresume. The problem was in missing NULL check. hu-serdev can be NULL and we should not blindly pass &serdev-dev somewhere,...
CVE-2022-49200 Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio: Fix kernel oops in btmtksdiointerrupt Fix the following kernel oops in btmtksdiointerrrupt 14.339134 btmtksdiointerrupt+0x28/0x54 14.339139 processsdiopendingirqs+0x68/0x1a0 14.339144 sdioirqwork+0x40/0x70...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-50148)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50148 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: fix wild-memory- access...
SUSE SLES15 Security Update : kernel (Live Patch 1 for SLE 15 SP6) (SUSE-SU-2024:3881-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3881-1 advisory. This update for the Linux Kernel 6.4.0-150600237 fixes several issues. The following security issues were fixed: - CVE-2024-42133: Bluetooth:...
PT-2024-20014 · Google · Android +1
Name of the Vulnerable Software and Affected Versions: Google Pixel versions affected versions not specified Non-Pixel Android versions affected versions not specified Description: A high severity Bluetooth issue is reported, which has been listed for both Pixel and non-Pixel devices in different...
SUSE-SU-2023:0519-1 Security update for the Linux Kernel (Live Patch 36 for SLE 15 SP1)
This update for the Linux Kernel 4.12.14-150100197131 fixes one issue. The following security issue was fixed: - CVE-2022-3564: Fixed use-after-free in l2capcore.c of the Bluetooth component bsc1206314...
PT-2023-35005 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.1.9 Description: A potential issue in the Bluetooth implementation of the Linux Kernel may cause a deadlock in rfcomm sk state change. The actual impact and attack plausibility have not yet been proven...
PT-2022-36513 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.265 Description: The issue is related to a use-after-free error in the L2CAP Logical Link Control and Adaptation Protocol component of the Bluetooth protocol. This error was introduced in version v3.6 and ...
PT-2022-35106 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns a potential security vulnerability in the Bluetooth functionality, specifically related to preventing double registration of suspend. The actual impact and attack...
PT-2022-21601 · Apple · Airpods +4
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.1 iPadOS versions prior to 16.1 Description: The issue allowed apps with Bluetooth access to record audio using connected AirPods, potentially capturing conversations with Siri and background sound. This was possible...
DEBIAN-CVE-2022-3565
A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function deltimer of the file drivers/isdn/mISDN/l1oipcore.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue...
SUSE-SU-2019:3233-1 Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-6064121 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free issue when hciuartregisterdev fails in hciuartsetproto in drivers/bluetooth/hcildisc.c bsc1156334. - CVE-2019-10220: Fixed Samba servers that c...
SUSE-SU-2018:0252-1 Security update for the Linux Kernel (Live Patch 15 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-606440 fixes several issues. The following security issues were fixed: - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c in did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a...
SUSE-SU-2018:0240-1 Security update for the Linux Kernel (Live Patch 25 for SLE 12)
This update for the Linux Kernel 3.12.61-5286 fixes one issue. The following security issues were fixed: - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a crafted...
