CVE-2025-47318 Buffer Over-read in BT Controller

Transient DOS while parsing the EPTM test control message to get the test pattern...

CVE-2025-47318

CVE-2025-47318 is a transient denial-of-service vulnerability in Qualcomm chipsets caused by parsing the EPTM test control message to retrieve the test pattern. The issue affects the EPTM parsing path and is described as a DoS with no confidentiality/integrity loss and high availability impact. P...

CVE-2025-47318 Buffer Over-read in BT Controller

Transient DOS while parsing the EPTM test control message to get the test pattern...

CVE-2025-47317 Buffer Over-read in BT Controller

Memory corruption due to global buffer overflow when a test command uses an invalid payload type...

CVE-2025-47317 Buffer Over-read in BT Controller

Memory corruption due to global buffer overflow when a test command uses an invalid payload type...

CVE-2025-47317

CVE-2025-47317 is described in the provided sources as memory corruption due to a global buffer overflow when a test command uses an invalid payload type. Connected documents identify Qualcomm-related components and reference a Qualcomm security bulletin; the exact affected product/version detail...

USN-7769-2 linux-realtime-6.14 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: terraform, amazon-cloudwatch-agent-operator, cloud-provider-gcp-cloud-controller-manager, nodetaint, aws-privateca-issuer, kubernetes-dashboard-web, ipfs-cluster, nuclei, rancher-security-scan, tflint, docker-cli, blob-csi, rabbitmq-cluster-operator,...

UBUNTU-CVE-2025-39889

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: Check encryption key size on incoming connection This is required for passing GAP/SEC/SEM/BI-04-C PTS test case: Security Mode 4 Level 4, Responder - Invalid Encryption Key Size - 128 bit This tests the security...

USN-7766-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Bus devices; - AM...

USN-7766-1 linux-aws-6.8, linux-gcp-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Bus devices; - AM...

CVE-2024-58241 Bluetooth: hci_core: Disable works on hci_unregister_dev

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Disable works on hciunregisterdev This make use of disablework on hciunregisterdev since the hcidev is about to be freed new submissions are not disarable...

CVE-2024-58241 Bluetooth: hci_core: Disable works on hci_unregister_dev

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Disable works on hciunregisterdev This make use of disablework on hciunregisterdev since the hcidev is about to be freed new submissions are not disarable...

net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()

...

CVE-2024-21935

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially resulting in data corruption...

CVE-2024-21927

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC to crash and reset, potentially resulting in denial of service...

CVE-2024-21935

CVE-2024-21935 affects AMD MI300X accelerators, specifically the Satellite Management Controller (SMC). The issue arises from insufficient input validation in the SMC, which could let an attacker with privileges manipulate Redfish API commands to remove files from the local root directory, potent...

CVE-2024-21935

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially resulting in data corruption...

CVE-2024-21927

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC to crash and reset, potentially resulting in denial of service...

CVE-2024-21927

Improper input validation in Satellite Management Controller SMC may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC to crash and reset, potentially resulting in denial of service...