Linux Distros Unpatched Vulnerability : CVE-2026-98294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciqca: Do not write to the serial port after it is closed hciuartclose closes the serdev port if HCIQUIRKNONPERSISTENTSETUP is set for example, for...

PT-2026-106987

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Bluetooth component allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update Googl...

Linux Distros Unpatched Vulnerability : CVE-2026-98246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: Serialize local codec list cleanup hcidevclosesync clears hdev-localcodecs after releasing hdev-lock. Codec list additions and both traversa...

Linux Distros Unpatched Vulnerability : CVE-2026-98292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access btmtksdio.c and btmtkuart.c cast a received WMT event straight to struct...

Linux Distros Unpatched Vulnerability : CVE-2026-98247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcicodec: validate vendor codec count length The Read Local Supported Codecs parsers consume the variable-sized standard codec array before parsing t...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_65334)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202665334 advisory. kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: Bluetooth: SMP: force responder MITM requirements before buildin...

ROS-20261006-73-0091

The vulnerability of the functions sessionfree, hidpsessionRemove, and hidpSessionThread in the net/bluetooth/hidp/core.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a...

PT-2026-106619

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup rfcomm sock cleanup listen closes unaccepted child sockets through rfcomm sock close, which takes the child socket lock before rfcomm dlc close acquires rfcomm...

Linux Distros Unpatched Vulnerability : CVE-2026-98295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: coredump: Quiesce dump work on unregister hcidevcdhandlepktinit arms dumptimeout and coredump producers queue dumprx without holding an hdev referenc...

C-PoC-for-CVE-2024-21306

instalar dependencias desde apt sudo apt install -y bluez-tools bluez-hcidump libbluetooth-dev git gcc python3-pip python3-setuptools python3-pydbus instalar pybluez desde el código fuente git clone https://github.com/pybluez/pybluez.git cd pybluez sudo python3 setup.py install compilar bdaddr...

CVE-2025-36911-exploit

WhisperPair CLI de Python Herramienta de explotación rápida para CVE-2025-36911 en Python para probar nuestro equipo Autor: Sébastien Dudek @FlUxIuS @ Penthertz Créditos: whisperpair.eu por el descubrimiento y esta bonita APK de @ZalexDev que acortó el tiempo de implementación wpair-app ⚠️ Aviso...

CVE-2026-90254

A flaw was found in the Linux kernel's Bluetooth subsystem. Specifically, a memory leak occurs in the hcisync component when an advertising instance is not properly freed during certain failure or cancellation scenarios. This happens because the advtimeoutexpire function passes a memory-allocated...

CVE-2026-90087

A flaw was found in the Linux kernel's Bluetooth Low Energy LE subsystem. When multiple LE connection attempts are made concurrently, and one connection fails, the system may not properly release the failed connection's resources. This resource leak can prevent all subsequent outgoing LE connecti...

CVE-2026-49933

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

trackem

trackem Passive Device Tracker AndroidTrackEm Mobile is a real-time, passive Wi-Fi + Bluetooth LE probe-request scanner designed for OSINT, red-team ops, and wireless research.It listens for client devices phones, laptops, IoT that are actively broadcasting the names of Wi-Fi networks...

CVE-2026-90253

A flaw was found in the Linux kernel's Bluetooth Management MGMT component. This vulnerability occurs when a mesh send cancel command is cancelled, but the associated memory and socket reference are not properly released. This oversight can lead to a resource leak, potentially allowing a local...

CVE-2026-90252

A flaw was found in the Bluetooth Management MGMT component of the Linux kernel. When a Host Controller Interface HCI command is cancelled, the associated memory is not properly freed, leading to a memory leak. This issue can also prevent the management socket from being released, potentially...

CVE-2026-49933

A vulnerability exists in the msft.cc component within the handle_le_monitor_device_event function. An uninitialized pointer dereference allows for a potential control-flow hijack within a privileged Bluetooth process. This flaw could enable a local escalation of privilege without requiring addit...

CVE-2026-49933

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-49933

In handlelemonitordeviceevent of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...