CVE-2026-74511

CVE-2026-74511 affects the Linux kernel Bluetooth mgmt path. The fix addresses a UAF in EIR updates when MGMT_OP_SET_LOCAL_NAME is processed asynchronously on powered controllers. Root cause: the EIR/class update path did not serialize against changes to the UUID list; pending commands could be f...

PT-2026-72963

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix pending command UAF in EIR updates MGMT OP SET LOCAL NAME is handled asynchronously on powered controllers and can run set name sync. When the controller is BR/EDR capable, set name sync updates the local nam...