AZL-96051 CVE-2026-74532 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing diagnostics TLV btinteldiagnostics accesses tlv-val0 without first validating that the diagnostics VSE is long enough to contain that field, so may cause reading data beyond the...

CVE-2026-74532

In the Linux kernel Bluetooth subsystem, CVE-2026-74532 affects btintel: btintel_diagnostics() which reads tlv->val[0] without verifying the diagnostics TLV length, risking reads beyond the frame. The documented fix is to validate the TLV length before access. Connected sources (SUSE, NVD, Deb...

CVE-2026-74532

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing diagnostics TLV btinteldiagnostics accesses tlv-val0 without first validating that the diagnostics VSE is long enough to contain that field, so may cause reading data beyond the...

CVE-2026-74532

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing diagnostics TLV btinteldiagnostics accesses tlv-val0 without first validating that the diagnostics VSE is long enough to contain that field, so may cause reading data beyond the...

CVE-2026-74532 Bluetooth: btintel: Validate length before parsing diagnostics TLV

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing diagnostics TLV btinteldiagnostics accesses tlv-val0 without first validating that the diagnostics VSE is long enough to contain that field, so may cause reading data beyond the...

PT-2026-72984

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing diagnostics TLV btintel diagnostics accesses tlv-val0 without first validating that the diagnostics VSE is long enough to contain that field, so may cause reading data beyond the...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET diagnostics IPC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A missing error check in .NET causes an...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

Unchecked Return Value

Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...

GHSA-9MR8-PWPW-3J2W Microsoft Security Advisory CVE-2026-62909 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET diagnostics IPC. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A missing error check in .NET causes an...

MAL-2026-12740 Malicious code in devplatform-react-rest-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755ebe99a58cc94ddd8953897d01f30fcbacd145f6acf635761cf08b33d4868c On require of this package, index.js loads ext.js, which fetches a platform-specific binary from a rotating list of Cloudflare workers.dev hosts...

MAL-2026-12408 Malicious code in pfp-block-independent-iframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2145fdce1d6879c4b5bd3682bf9b8e7c386f3f80f15721c26fe6bd2638564185 On require of the package, index.js loads bootstrap.js, which selects a platform-specific payload path, fetches bytes from one of four...

Malicious code in pfp-integration-mobile-heading (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3428631054a61f4fd2a14f372d7c782dd08633446897b0ee0959d259496d170 On require of the package, bootstrap.js selects a platform-specific binary path, downloads an opaque executable over HTTPS from a rotating list of...

MAL-2026-12268 Malicious code in tinkoff-statist-browser-typed-client-mb.product.tgeofencing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471fb9b5c8d45abc59ffda97063561b4882d28109c9959c717fbcd0d9f25c00d On require of this package, index.js loads platform.js which assembles remote hostnames at runtime by concatenating fragmented string arrays to hide...