Double free

Inconsistent handling of error cases in bluetooth hci may lead to a double free condition of a network buffer...

zephyr 资源管理错误漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in zephyr 3.2 and earlier versions, which stems from inconsistent handling of error conditions in bluetooth hci, and could lead to a double release of a network buffer...

CVE-2022-3806

CVE-2022-3806 covers inconsistent error handling in Bluetooth HCI that may cause a double free of a network buffer. Multiple connected sources (NVD, CNNVD, CVE listing) tie this to Zephyr and indicate Zephyr 3.2 and earlier as affected; the issue is rated CVSS v3.1 9.8 (CRITICAL) with network acc...

CVE-2023-0396 Buffer Overreads in Bluetooth HCI

A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses...

CVE-2023-0396 Buffer Overreads in Bluetooth HCI

A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses...

PT-2023-16239 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth software affected versions not specified Description: A malicious or defective Bluetooth controller can cause buffer overreads in most functions that process HCI command responses. Recommendations: At the moment, there is no...

PT-2023-13577 · Unknown · Bluetooth Hci

Name of the Vulnerable Software and Affected Versions: Bluetooth HCI affected versions not specified Description: The issue is related to inconsistent handling of error cases in Bluetooth HCI, which may lead to a double free condition of a network buffer. Recommendations: At the moment, there is ...

CVE-2023-0396

CVE-2023-0396 describes a buffer overread in the Bluetooth controller’s handling of HCI command responses. The root cause is a malformed/defective Bluetooth controller causing overreads across many functions that process HCI responses. Documents consistently reference high impact on confidentiali...

PT-2023-33787 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.16 Description: The issue concerns error handling in the hci register dev function. It was introduced in version v5.7 and fixed in version v6.0.16. The actual impact and attack plausibility have not yet bee...

PT-2023-9333 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rt5-00325-g8a5f56bcfcca 8 Description: The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the hci qca driver. This vulnerability occurs when the driver shutdown...

USN-5780-1: Linux kernel (OEM) vulnerabilities

It was discovered that a memory leak existed in the IPv6 implementation of the Linux kernel. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2022-3524 It was discovered that the Bluetooth HCI implementation in the Linux kernel did not properly deallocate memory...

2022-12 Cumulative Update for Azure Stack HCI, version 20H2 and Windows Server 2019 Datacenter: Azure Edition for x64-based Systems (KB5021236)

Install this update to resolve issues in Azure Stack HCI, version 20H2 and Windows Server 2019 Datacenter: Azure Edition. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, y...

December 13, 2022-KB5021084 Cumulative Update for .NET Framework 3.5 and 4.8 for Azure Stack HCI, version 22H2

None None...

December 13, 2022 Security update (KB5021236)

None None...

Oracle Linux 9 : kernel (ELSA-2022-8267)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-8267 advisory. - posix-cpu-timers: Cleanup CPU timers before freeing them during exec Wander Lairson Costa 2116968 CVE-2022-2585 - fix race between exititimers and...

kernel: use-after-free vulnerability in function sco_sock_sendmsg()

A flaw use-after-free in function scosocksendmsg of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIOREGISTER or other way triggers race condition of the call scoconndel together with the call scosocksendmsg with the expected controllable faulting memory page. A privilege...

kernel: use-after-free vulnerability in function sco_sock_sendmsg()

A flaw use-after-free in function scosocksendmsg of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIOREGISTER or other way triggers race condition of the call scoconndel together with the call scosocksendmsg with the expected controllable faulting memory page. A privilege...

PT-2022-35494 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to the Bluetooth hci sysfs in the Linux Kernel, where an attempt to call device add multiple times could potentially lead to a security vulnerability. The actual impac...

PT-2022-35830 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.14.296 Description: The issue is related to the Bluetooth hci sysfs in the Linux Kernel. It involves attempting to call device add multiple times. The actual impact and attack plausibility have not yet been...

PT-2022-35550 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the hci ldisc,serdev component. The actual impact and attack plausibility have not yet been...