Lucene search
+L

1566 matches found

Positive Technologies
Positive Technologies
added 2026/05/28 12:0 a.m.14 views

PT-2026-44309

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The virtbt rx handle function in the Bluetooth virtio bt driver fails to validate that the remaining payload length is sufficient to cover the fixed HCI header for the selected packet ty...

5.5CVSS5.9AI score0.00123EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/05/28 12:0 a.m.12 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the virtiobt driver. In this driver, the virtbtrxhandle function does not check whether the...

5.9AI score0.00123EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/05/27 7:7 p.m.16 views

CVE-2026-46056

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, exists within the Secure Simple Pairing SSP passkey handlers. It occurs when hciconn lookup and field access are performed without proper locking, allowing a connection to be freed concurrently...

8.8CVSS6AI score0.00262EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/27 2:17 p.m.13 views

UBUNTU-CVE-2026-46056

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix potential UAF in SSP passkey handlers hciconn lookup and field access must be covered by hdev lock in hciuserpasskeynotifyevt and hcikeypressnotifyevt, otherwise the connection can be freed concurrently...

8.8CVSS5.7AI score0.00262EPSS
SaveExploits0References13
ATTACKERKB
ATTACKERKB
added 2026/05/27 12:57 p.m.8 views

CVE-2026-46056

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix potential UAF in SSP passkey handlers hciconn lookup and field access must be covered by hdev lock in hciuserpasskeynotifyevt and hcikeypressnotifyevt, otherwise the connection can be freed concurrently...

8.8CVSS5.7AI score0.00262EPSS
SaveExploits0References9Affected Software1
Debian CVE
Debian CVE
added 2026/05/27 12:57 p.m.17 views

CVE-2026-46056

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix potential UAF in SSP passkey handlers hciconn lookup and field access must be covered by hdev lock in hciuserpasskeynotifyevt and hcikeypressnotifyevt, otherwise the connection can be freed concurrently...

8.8CVSS5.7AI score0.00262EPSS
SaveExploits0
CVE
CVE
added 2026/05/27 12:57 p.m.58 views

CVE-2026-46056

The CVE-2026-46056 entry documents a Linux kernel Bluetooth UAF vulnerability in the SSP passkey handlers (hci_event path). The issue arises when hci_conn lookup and field access are performed without holding the hdev lock, creating a window where a connection could be freed concurrently in hci_u...

8.8CVSS5.8AI score0.00262EPSS
SaveExploits0References8Affected Software1
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.12 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a potential issue with the SSP password key handling function in Bluetooth hcievent, allowing for the...

8.8CVSS5.8AI score0.00262EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/05/27 12:0 a.m.15 views

CVE-2026-46056

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix potential UAF in SSP passkey handlers hciconn lookup and field access must be covered by hdev lock in hciuserpasskeynotifyevt and hcikeypressnotifyevt, otherwise the connection can be freed concurrently...

8.8CVSS6AI score0.00262EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/05/22 10:3 p.m.49 views

CVE-2026-26147 Azure Stack HCI Information Disclosure Vulnerability

...

7.7CVSS0.00579EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/22 10:3 p.m.11 views

CVE-2026-26147 Azure Stack HCI Information Disclosure Vulnerability

...

7.7CVSS5.8AI score0.00579EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/22 10:3 p.m.53 views

CVE-2026-26147

Azure Stack HCI Information Disclosure Vulnerability (CVE-2026-26147) can arise from improper input validation in Azure Compute Gallery, enabling a network-based disclosure by an authorized attacker. Impact: information disclosure; confidentiality impact HIGH, attack vector NETWORK, privileges re...

7.7CVSS5.8AI score0.00579EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
added 2026/05/21 2:0 p.m.13 views

Azure Stack HCI Information Disclosure Vulnerability

Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

7.7CVSS5.8AI score0.00579EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2026/05/21 12:0 a.m.22 views

KLA91067 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Entra ID can be...

10CVSS7.8AI score0.00579EPSS
SaveExploits0References13
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux – Vulnerability in Linux

The file net/bluetooth/hcirequest.c in the Linux kernel, up to version 5.12.2, contains a race condition related to the removal of the HCI controller...

7CVSS6.6AI score0.00691EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Avoid use-after-free in dbg for hciaddadvmonitor KSAN reports a use-after-free in hciaddadvmonitor. When adding an adv monitor, hciaddadvmonitor calls msftaddmonitorpattern, which in turn calls...

5.8AI score0.00214EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: hcisync: Fixed UAF in hcidisconnectallsync A use-after-free can occur in hcidisconnectallsync if a connection is deleted due to concurrent processing of a controller event. To prevent this, the code now attempts to...

5.9AI score0.00161EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: hciuart: A missing NULL check was added in h5enqueue. The Syzbot encountered a general protection fault in pmruntimeresume. The issue was due to a missing NULL check. hu-serdev can be NULL, and we should not blindly...

5.5CVSS6.3AI score0.00245EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: hcisync: fixed a memory leak in hciupdateadvdata. When hcicmdsyncqueue fails in hciupdateadvdata, the instptr is not freed, which can lead to a memory leak. To address this issue, ERRPTR/PTRERR was used instead of...

5.5CVSS6.3AI score0.00148EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux – Vulnerability in Ceph

IBM Spectrum Fusion HCI versions 2.5.2 through 2.7.2 may allow attackers to perform unauthorized actions in the RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807...

9.8CVSS6.8AI score0.02539EPSS
SaveExploits1References2
Rows per page
Query Builder