Lucene search
+L

1566 matches found

CNNVD
CNNVD
added 2026/05/28 12:0 a.m.9 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from out-of-bounds read accesses and infinite loops in the hcilecreatebigcompleteevt function. This...

8.1CVSS5.8AI score0.00277EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/28 12:0 a.m.14 views

PT-2026-44309

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The virtbt rx handle function in the Bluetooth virtio bt driver fails to validate that the remaining payload length is sufficient to cover the fixed HCI header for the selected packet ty...

5.5CVSS5.9AI score0.00123EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/05/27 7:7 p.m.16 views

CVE-2026-46056

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, exists within the Secure Simple Pairing SSP passkey handlers. It occurs when hciconn lookup and field access are performed without proper locking, allowing a connection to be freed concurrently...

8.8CVSS6AI score0.00262EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/27 2:17 p.m.13 views

UBUNTU-CVE-2026-46056

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix potential UAF in SSP passkey handlers hciconn lookup and field access must be covered by hdev lock in hciuserpasskeynotifyevt and hcikeypressnotifyevt, otherwise the connection can be freed concurrently...

8.8CVSS5.7AI score0.00262EPSS
SaveExploits0References13
ATTACKERKB
ATTACKERKB
added 2026/05/27 12:57 p.m.8 views

CVE-2026-46056

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix potential UAF in SSP passkey handlers hciconn lookup and field access must be covered by hdev lock in hciuserpasskeynotifyevt and hcikeypressnotifyevt, otherwise the connection can be freed concurrently...

8.8CVSS5.7AI score0.00262EPSS
SaveExploits0References9Affected Software1
CVE
CVE
added 2026/05/27 12:57 p.m.58 views

CVE-2026-46056

The CVE-2026-46056 entry documents a Linux kernel Bluetooth UAF vulnerability in the SSP passkey handlers (hci_event path). The issue arises when hci_conn lookup and field access are performed without holding the hdev lock, creating a window where a connection could be freed concurrently in hci_u...

8.8CVSS5.8AI score0.00262EPSS
SaveExploits0References8Affected Software1
Debian CVE
Debian CVE
added 2026/05/27 12:57 p.m.17 views

CVE-2026-46056

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix potential UAF in SSP passkey handlers hciconn lookup and field access must be covered by hdev lock in hciuserpasskeynotifyevt and hcikeypressnotifyevt, otherwise the connection can be freed concurrently...

8.8CVSS5.7AI score0.00262EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2026/05/27 12:0 a.m.15 views

CVE-2026-46056

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: fix potential UAF in SSP passkey handlers hciconn lookup and field access must be covered by hdev lock in hciuserpasskeynotifyevt and hcikeypressnotifyevt, otherwise the connection can be freed concurrently...

8.8CVSS6AI score0.00262EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.12 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a potential issue with the SSP password key handling function in Bluetooth hcievent, allowing for the...

8.8CVSS5.8AI score0.00262EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/05/22 10:3 p.m.11 views

CVE-2026-26147 Azure Stack HCI Information Disclosure Vulnerability

...

7.7CVSS5.8AI score0.00579EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/22 10:3 p.m.53 views

CVE-2026-26147

Azure Stack HCI Information Disclosure Vulnerability (CVE-2026-26147) can arise from improper input validation in Azure Compute Gallery, enabling a network-based disclosure by an authorized attacker. Impact: information disclosure; confidentiality impact HIGH, attack vector NETWORK, privileges re...

7.7CVSS5.8AI score0.00579EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/05/22 10:3 p.m.49 views

CVE-2026-26147 Azure Stack HCI Information Disclosure Vulnerability

...

7.7CVSS0.00579EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2026/05/21 2:0 p.m.13 views

Azure Stack HCI Information Disclosure Vulnerability

Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

7.7CVSS5.8AI score0.00579EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2026/05/21 12:0 a.m.22 views

KLA91067 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Entra ID can be...

10CVSS7.8AI score0.00579EPSS
SaveExploits0References13
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux – Vulnerability in Linux

The file net/bluetooth/hcirequest.c in the Linux kernel, up to version 5.12.2, contains a race condition related to the removal of the HCI controller...

7CVSS6.6AI score0.00691EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.11 views

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisysfs: Fixed an issue where the function deviceadd was called multiple times. The function deviceadd should not be called multiple times, as stated in its documentation: “Do not call this routine or deviceregister...

7.8CVSS6.1AI score0.00156EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.9 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: hcildisc,serdev: failure in checking percpuinitrwsem syzbot reports a NULL pointer dereferencing at hciuartttyclose 1. For rcusyncenter, percpuinitrwsem is called without rcusyncinit, because hciuartttyopen ignores...

5.5CVSS6.2AI score0.00191EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Avoid use-after-free in dbg for hciaddadvmonitor KSAN reports a use-after-free in hciaddadvmonitor. When adding an adv monitor, hciaddadvmonitor calls msftaddmonitorpattern, which in turn calls...

5.8AI score0.00214EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: hcisync: Fixed UAF in hcidisconnectallsync A use-after-free can occur in hcidisconnectallsync if a connection is deleted due to concurrent processing of a controller event. To prevent this, the code now attempts to...

5.9AI score0.00161EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fixed the issue where no check was performed to determine whether skb actually contained an ACL header. Otherwise, the code might attempt to access uninitialized/invalid memory beyond the valid skb-data...

5.5CVSS6.4AI score0.0022EPSS
SaveExploits0References2
Rows per page
Query Builder