2050 matches found
UBUNTU-CVE-2021-3564
A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13...
CVE-2021-3564
A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13...
CVE-2021-3564
A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13...
CVE-2021-3564
CVE-2021-3564 describes a local, double-free memory corruption in the Linux kernel Bluetooth HCI device initialization. A local attacker could crash the system by triggering the flaw when attaching a malicious HCI TTY Bluetooth device; the issue affects Linux kernel versions from 3.13 onward. Con...
CVE-2021-3564: Double Free
A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash the system. This flaw affects all the Linux kernel versions starting from 3.13...
June 8, 2021 Servicing Stack Update (KB5004179)
None None...
June 8, 2021 Public preview security update (KB5003645)
None None...
June 8, 2021 Security Update (KB5003643)
None None...
DEBIAN-CVE-2020-36386
An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hcievent.c has a slab out-of-bounds read in hciextendedinquiryresultevt, aka CID-51c19bf3d5cf...
UBUNTU-CVE-2020-36386
An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hcievent.c has a slab out-of-bounds read in hciextendedinquiryresultevt, aka CID-51c19bf3d5cf...
Linux kernel 缓冲区错误漏洞
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A slab out-of-bounds read vulnerability exists in hciextendedinquiryresultevt in net/bluetooth/hcievent.c in versions...
UBUNTU-CVE-2021-3573
A use-after-free in function hcisockboundioctl of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hciunregisterdev together with one of the calls hcisockblacklistadd, hcisockblacklistdel, hcigetconninfo,...
CVE-2021-3573
A use-after-free in function hcisockboundioctl of the Linux kernel HCI subsystem was found in the way user calls ioct HCIUNBLOCKADDR or other way triggers race condition of the call hciunregisterdev together with one of the calls hcisockblacklistadd, hcisockblacklistdel, hcigetconninfo,...
Updated kernel packages fix security vulnerabilities
This kernel update is based on upstream 5.10.41 and fixes at least the following security issues: A double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user attach malicious HCI TTY Bluetooth device. A local user could use this flaw to crash...
PT-2021-24735
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description A potential issue exists due to a deadlock between hci dev-lock and socket lock in Bluetooth functionality. The actual impact and attack plausibility have not yet been proven. Recommendations...
PT-2021-24837
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue is related to a potential deadlock between hci dev-lock and socket lock in Bluetooth functionality. The actual impact and attack plausibility have not yet been proven...
PT-2021-28729
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue is related to a potential deadlock between hci dev-lock and socket lock in Bluetooth functionality. The actual impact and attack plausibility have not yet been proven. Recommendation...
PT-2021-28831
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue is related to a potential deadlock between hci dev-lock and socket lock in Bluetooth functionality. The actual impact and attack plausibility have not yet been proven. Recommendatio...
PT-2021-4240 · Linux +8 · Linux Kernel +8
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.13-rc5 Description: A use-after-free in the function hci sock bound ioctl of the Linux kernel HCI subsystem was found. This occurs when a user calls ioct HCIUNBLOCKADDR or triggers a race condition with the ca...
CVE-2020-10066
Incorrect Error Handling in Bluetooth HCI core. Zephyr versions = v1.14.2, = v2.2.0 contain NULL Pointer Dereference CWE-476. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qr...