CVE-2026-68389

A flaw was found in the Bluetooth Host Controller Interface HCI Qualcomm Atheros QCA driver within the Linux kernel. This vulnerability occurs when the controller reports an invalid zero memory dump size, leading to improper state cleanup. An attacker could potentially exploit this to cause memor...

CVE-2026-64573

A flaw was found in the Linux kernel's Bluetooth subsystem, specifically within the qca driver. A local attacker could exploit an integer underflow vulnerability in the NVM tag length parser by providing specially crafted firmware data. This could lead to an out-of-bounds memory write, potentiall...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989320 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Use deltimersync before freeing While looking at a crash report on a timer lis...

UBUNTU-CVE-2022-49555

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Use deltimersync before freeing While looking at a crash report on a timer list being corrupted, which usually happens when a timer is freed while still active. This is commonly triggered by code calling deltim...

CVE-2022-49555 Bluetooth: hci_qca: Use del_timer_sync() before freeing

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Use deltimersync before freeing While looking at a crash report on a timer list being corrupted, which usually happens when a timer is freed while still active. This is commonly triggered by code calling deltim...

PT-2023-35189 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.90 Description: A potential security issue has been identified in the Linux Kernel, related to the hci qca driver shutdown on closed serdev. The actual impact and attack plausibility have not yet been...

PT-2023-9333 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rt5-00325-g8a5f56bcfcca 8 Description: The issue is related to a use-after-free vulnerability in the Linux kernel, specifically in the hci qca driver. This vulnerability occurs when the driver shutdown...

PT-2022-6417 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.3 Description: The issue is related to the misinterpretation of the devm gpiod get index optional return value in the drivers/bluetooth/hci qca.c file of the Linux kernel, which can lead to a denial of...