11 matches found
CVE-2026-64178
A flaw was found in the Linux kernel's Bluetooth Network Encapsulation Protocol BNEP module. A local attacker with administrative network capabilities CAPNETADMIN could exploit a use-after-free vulnerability in the bnepaddconnection function. This occurs because the function fails to properly...
CVE-2026-64178
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev-name bnepaddconnection needs to keep holding the bnepsessionsem while reading dev-name just like bnepgetconnlist does; otherwise the bnepsession thread can concurrently free the netdevice, whi...
EUVD-2026-45863
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev-name bnepaddconnection needs to keep holding the bnepsessionsem while reading dev-name just like bnepgetconnlist does; otherwise the bnepsession thread can concurrently free the netdevice, whi...
CVE-2026-64178 Bluetooth: bnep: Fix UAF read of dev->name
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev-name bnepaddconnection needs to keep holding the bnepsessionsem while reading dev-name just like bnepgetconnlist does; otherwise the bnepsession thread can concurrently free the netdevice, whi...
CVE-2026-64178 Bluetooth: bnep: Fix UAF read of dev->name
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev-name bnepaddconnection needs to keep holding the bnepsessionsem while reading dev-name just like bnepgetconnlist does; otherwise the bnepsession thread can concurrently free the netdevice, whi...
PT-2026-61495
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev-name bnep add connection needs to keep holding the bnep session sem while reading dev-name just like bnep get connlist does; otherwise the bnep session thread can concurrently free the net...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003207)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003207 advisory. The bnepaddconnection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows local use...
The vulnerability of the cmtp_add_connection function in the driver /isdn/capi/kcapi.c of the isdn component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the cmtpaddconnection function in the /isdn/capi/kcapi.c driver of the Linux operating system’s ISDN component is related to an index out of range. Exploiting this vulnerability could allow an attacker to cause service failures...
Linux Kernel 'bnep_add_connection' function local elevation of privilege vulnerability
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'bnepaddconnection' function of the net/bluetooth/bnep/core.c file in versions of the Linux kernel prior to 3.19, which stems fr...
UBUNTU-CVE-2017-15868
The bnepaddconnection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is available, which allows local users to gain privileges via a crafted application...
LinkedIn Patches XSS and CSRF Vulnerabilities
LinkedIn has patched a number of exploitable vulnerabilities that could have led to phishing attacks, malware infections and the loss of credentials for users of the social network for business professionals. Researchers at Internet Security Auditors in Spain reported the vulnerabilities to...