Lucene search
+L

20047 matches found

Cvelist
Cvelist
added 2024/08/21 6:10 a.m.44 views

CVE-2022-48878 Bluetooth: hci_qca: Fix driver shutdown on closed serdev

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Fix driver shutdown on closed serdev The driver shutdown callback which sends EDLSOCRESET to the device over serdev should not be invoked when HCI device is not open e.g. if hcidevopensync failed, because the...

7.8CVSS0.00241EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2024/08/21 6:10 a.m.57 views

CVE-2022-48878

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Fix driver shutdown on closed serdev The driver shutdown callback which sends EDLSOCRESET to the device over serdev should not be invoked when HCI device is not open e.g. if hcidevopensync failed, because the...

7.8CVSS5.5AI score0.00241EPSS
SaveExploits0
CVE
CVE
added 2024/08/21 6:10 a.m.91 views

CVE-2022-48878

CVE-2022-48878 affects the Linux kernel Bluetooth stack (hci_qca) and the serdev shutdown path. The issue arises when the HCI device is not open (e.g., hci_dev_open_sync() failed) and the shutdown callback may still attempt to send EDL_SOC_RESET over serdev, potentially triggering a use-after-fre...

7.8CVSS6.4AI score0.00241EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/08/21 6:10 a.m.19 views

CVE-2022-48878 Bluetooth: hci_qca: Fix driver shutdown on closed serdev

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Fix driver shutdown on closed serdev The driver shutdown callback which sends EDLSOCRESET to the device over serdev should not be invoked when HCI device is not open e.g. if hcidevopensync failed, because the...

7.8CVSS6AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2024/08/21 6:10 a.m.29 views

CVE-2022-48878 Bluetooth: hci_qca: Fix driver shutdown on closed serdev

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Fix driver shutdown on closed serdev The driver shutdown callback which sends EDLSOCRESET to the device over serdev should not be invoked when HCI device is not open e.g. if hcidevopensync failed, because the...

7.8CVSS6.7AI score0.00241EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/08/21 6:10 a.m.48 views

CVE-2022-48871 tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer

In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer Driver's probe allocates memory for RX FIFO port-rxfifo based on default RX FIFO depth, e.g. 16. Later during serial startup the qcomgeniserialportsetup...

8.8CVSS0.00349EPSS
SaveExploits0References4
CVE
CVE
added 2024/08/21 6:10 a.m.82 views

CVE-2022-48871

In CVE-2022-48871, the Linux kernel fix targets tty: serial: qcom-geni-serial slab-out-of-bounds on the RX FIFO buffer. The probe allocates port->rx_fifo using a default depth (e.g., 16); during serial startup, port->rx_fifo_depth is updated to match device capabilities (e.g., 32). The RX U...

8.8CVSS6.7AI score0.00349EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/21 6:10 a.m.61 views

CVE-2022-48871 tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer

In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer Driver's probe allocates memory for RX FIFO port-rxfifo based on default RX FIFO depth, e.g. 16. Later during serial startup the qcomgeniserialportsetup...

8.8CVSS7AI score0.00349EPSS
SaveExploits0References4
OSV
OSV
added 2024/08/21 6:10 a.m.22 views

CVE-2022-48871 tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer

In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer Driver's probe allocates memory for RX FIFO port-rxfifo based on default RX FIFO depth, e.g. 16. Later during serial startup the qcomgeniserialportsetup...

8.8CVSS6.2AI score
SaveExploits0References7
Debian CVE
Debian CVE
added 2024/08/21 6:10 a.m.87 views

CVE-2022-48871

In the Linux kernel, the following vulnerability has been resolved: tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer Driver's probe allocates memory for RX FIFO port-rxfifo based on default RX FIFO depth, e.g. 16. Later during serial startup the qcomgeniserialportsetup...

8.8CVSS5.7AI score0.00349EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/08/21 12:00 a.m.130 views

Ubuntu 16.04 LTS / 18.04 LTS : Linux kernel vulnerabilities (USN-6972-1)

"The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6972-1 advisory. Yuxuan Hu discovered that the Bluetooth RFCOMM protocol driver in the Linux Kernel contained a race condition, leading to a NULL pointer...

8.8CVSS6.9AI score0.01177EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus
added 2024/08/21 12:00 a.m.54 views

Ubuntu 20.04 LTS : Linux kernel (BlueField) vulnerabilities (USN-6951-4)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6951-4 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws i...

10CVSS7.4AI score0.02701EPSS
SaveExploits4References83
Tenable Nessus
Tenable Nessus
added 2024/08/21 12:00 a.m.60 views

Ubuntu 20.04 LTS : Linux kernel (HWE) vulnerabilities (USN-6950-4)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6950-4 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

9.8CVSS7.1AI score0.01305EPSS
SaveExploits2References50
CNNVD
CNNVD
added 2024/08/21 12:00 a.m.11 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue in the Bluetooth component when the driver is turned off...

7.8CVSS6.5AI score0.00241EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2024/08/21 12:00 a.m.58 views

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6973-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6973-1 advisory. It was discovered that a race condition existed in the Bluetooth subsystem in the Linux kernel, leading to a null pointer dereference...

8.4CVSS7AI score0.00805EPSS
SaveExploits1References9
Veracode
Veracode
added 2024/08/20 9:28 a.m.25 views

Divide By Zero

libzephyr.so is vulnerable to Divide By Zero. The vulnerability is caused due to a function llcppdudecodeconnupdateind within subsys/bluetooth/controller/llsw/ullllcppdu.c not validating the content before using it. This can lead to a malicious BLE device crash BLE peripheral's BLE controller by...

7.6CVSS6.7AI score0.00456EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2024/08/20 12:00 a.m.41 views

openSUSE Security Advisory (SUSE-SU-2024:2785-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS7.6AI score0.00428EPSS
SaveExploits0References5
NVD
NVD
added 2024/08/19 10:15 p.m.34 views

CVE-2024-4785

BT: Missing Check in LLCONNECTIONUPDATEIND Packet Leads to Division by Zero...

7.6CVSS0.00456EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/08/19 10:10 p.m.21 views

CVE-2024-4785 BT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by Zero

BT: Missing Check in LLCONNECTIONUPDATEIND Packet Leads to Division by Zero...

7.6CVSS7.1AI score0.00456EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/19 10:10 p.m.14 views

CVE-2024-4785 BT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by Zero

BT: Missing Check in LLCONNECTIONUPDATEIND Packet Leads to Division by Zero...

7.6CVSS5.9AI score0.00437EPSS
SaveExploits1References4
Rows per page
Query Builder