Astra Linux – vulnerability in linux-5.10, linux-5.15, linux

There are use-after-free vulnerabilities in the Linux kernel’s net/bluetooth/l2capcore.c file, specifically in the l2capconnect and l2capleconnectreq functions. These vulnerabilities may allow remote code execution and kernel memory leakage via Bluetooth. A remote attacker who is close to the...

EUVD-2026-81948

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: do not leak an hciconn when a second LE connect is rejected createleconncomplete decides whether the failed connection is still pending by comparing it against hcilookupleconnect, which returns the first LE connection ...

PT-2026-94435

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth subsystem where an hci conn is leaked when a second Low Energy LE connection attempt is rejected. This occurs because the create le conn complete functio...

PT-2026-72992

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth L2CAP implementation. The function l2cap le connect rsp retrieves a channel using l2cap get chan by ident but fails to hold a reference or...

kernel: use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c

A use-after-free flaw was found in the Linux kernel's implementation of logical link control and adaptation protocol L2CAP, part of the Bluetooth stack in the l2capconnect and l2capleconnectreq functions. An attacker with physical access within the range of standard Bluetooth transmission could...

Linux kernel L2CAP Code Execution

The vulnerability of the l2capconnect and l2capleconnectreq functions net/bluetooth/l2capcore.c in Linux kernel systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...