PT-2026-85605

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci event: fix LE list UAF on reset hci cc reset clears the LE accept and resolving lists without taking hdev-lock. Other command-complete handlers serialize updates to these lists with that lock, and the debugfs reade...

K000163200: Linux kernel vulnerability CVE-2026-53254

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in MCC handlers The RFCOMM MCC handlers cast skb-data to protocol-specific structs without validating skb-len first. A malicious remote device can send truncate...

ALSA-2026:63128 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: hcildisc: Clear HCIUARTPROTOINIT on error CVE-2026-53073 kernel: exfat: fix potential use-after-free in exfatfinddirentry CVE-2026-63808 kernel: KEYS: fix overflow in...

The vulnerability of the btsdioremove() function in the drivers/bluetooth/btsdio.c driver for Bluetooth devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the btsdioremove function in the drivers/bluetooth/btsdio.c driver for Bluetooth devices in Linux operating systems is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the btmtk_usb_hci_wmtSync() function in the drivers/bluetooth/btmtk.c module of the Linux kernel’s Bluetooth device driver allows a attacker to disclose confidential information or cause service failures.

The vulnerability of the btmtkusbhciwmtSync function in the drivers/bluetooth/btmtk.c module of the Linux Bluetooth kernel driver is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to disclose sensitive information or...

kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect()

A flaw was found in the Linux kernel, specifically within its Bluetooth Synchronous Connection-Oriented SCO component. This vulnerability occurs due to race conditions when multiple connection attempts are made simultaneously on the same Bluetooth socket. This can lead to a use-after-free error,...

kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, exists within the Secure Simple Pairing SSP passkey handlers. It occurs when hciconn lookup and field access are performed without proper locking, allowing a connection to be freed concurrently...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

SUSE CVE-2026-74508

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: reject frames without a transaction header hidprecvctrlframe and hidprecvintrframe read skb-data0 before checking that the L2CAP SDU contains a transaction header. A connected HIDP peer can send an empty basic-mo...

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge web browsers allows attackers to gain access to confidential data.

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge browsers is related to lack of access control. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the download_firmware() function in the drivers/bluetooth/hci_ll.c driver for Bluetooth devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the downloadfirmware function in the drivers/bluetooth/hcill.c file of the Bluetooth device driver for the Linux operating system is related to incomplete filtering of special elements. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge web browsers allows attackers to gain access to confidential data.

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge browsers is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created HTML page...

RHEL 9 : kernel (RHSA-2026:62568)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62568 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Squashfs: sanity check symbol...

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge web browsers allows a hacker to induce a service failure.

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge browsers is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created HTML page...

CVE-2018-1000117

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:51+00:00| seen| Telegram/yngyEw40TVGOGuJmHaN3GRlPpgOSJbqwpKH4VCTtcW0tCfE 2026-09-02 01:03:29+00:00| seen| Telegram/yngyEw40TVGOGuJmHaN3GRlPpgOSJbqwpKH4VCTtcW0tCfE 2026-09-08 20:00:04+00:00| published-proof-of-concept|...

CVE-2022-24630

creationtimestamp| type| source ---|---|--- 2026-09-01 20:01:04+00:00| seen| https://t.me/hackingAttack/91679 2026-09-02 01:01:24+00:00| seen| https://t.me/hackingAttack/91679 2026-09-04 21:00:04+00:00| published-proof-of-concept| https://t.me/hackingAttack/91679 2026-09-05 01:00:15+00:00|...

SUSE CVE-2026-72334

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix malformed ISOEND/CONT handling Core specification Part C vol 4 sec 5.4.5 does not exclude empty ISOCONT, ISOEND packets. We currently reject them if they are last. If controller sends malformed sequence ISOSTA...

SUSE CVE-2026-72335

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix adv monitor add failure cleanup hciaddadvmonitor publishes a new advmonitor in hdev-advmonitorsidr before the powered MSFT setup step. The MSFT offload add path can then fail either locally before the...

SUSE CVE-2026-72336

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: 6lowpan: hold L2CAP conn across debugfs control getl2capconn looks up an LE hciconn under hdev protection, but then drops that protection before reading hcon-l2capdata and before lowpancontrolwrite later dereferences...