SUSE CVE-2026-74511

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-74511

A use-after-free vulnerability exists in the Linux kernel's Bluetooth management (mgmt) subsystem . The root cause is a race condition in pending_eir_or_class(), which failed to include MGMT_OP_SET_LOCAL_NAME as an EIR/class-affecting command and walked hdev->mgmt_pending without holding hdev-...

PT-2026-72963

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix pending command UAF in EIR updates MGMT OP SET LOCAL NAME is handled asynchronously on powered controllers and can run set name sync. When the controller is BR/EDR capable, set name sync updates the local nam...