Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: eir: Fixed possible crashes when using eircreateadvdata. eircreateadvdata may attempt to add EIRFLAGS and EIRTXPOWER without checking whether those values are compatible with the structure...

CVE-2026-64539

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD eircreateadvdata builds the advertising data into a fixed-size buffer "size", 31 for the legacy path. It may prepend a 3-byte "Flags" AD structure LEADNOBREDR on an...

PT-2026-65214

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack-out-of-bounds write exists in the Bluetooth component. The eir create adv data function constructs advertising data within a fixed-size buffer. When using the legacy path, the...

CVE-2026-44634

SimpleBLE is a cross-platform library and bindings for Bluetooth Low Energy BLE. Prior to version 0.14.0, there are multiple stack-based buffer overflow vulnerabilities in SimpleBLE. There is a stack overflow vulnerability in the dongl backend’s Protocol::simpleblewrite function local,...

CVE-2026-44634 Stack buffer overflows in SimpleBLE

SimpleBLE is a cross-platform library and bindings for Bluetooth Low Energy BLE. Prior to version 0.14.0, there are multiple stack-based buffer overflow vulnerabilities in SimpleBLE. There is a stack overflow vulnerability in the dongl backend’s Protocol::simpleblewrite function local,...

CVE-2026-44634 Stack buffer overflows in SimpleBLE

SimpleBLE is a cross-platform library and bindings for Bluetooth Low Energy BLE. Prior to version 0.14.0, there are multiple stack-based buffer overflow vulnerabilities in SimpleBLE. There is a stack overflow vulnerability in the dongl backend’s Protocol::simpleblewrite function local,...

CVE-2026-44634

The CVE-2026-44634 affects SimpleBLE prior to version 0.14.0, with multiple stack-based buffer overflow flaws. One in the dongl backend’s Protocol::simpleble_write (local, caller-controlled input); two related to processing BLE advertisement data (manufacturer-specific and service data) that can ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986376 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was being performed at t...

SUSE CVE-2023-53017

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: fix memory leak in hciupdateadvdata When hcicmdsyncqueue failed in hciupdateadvdata, instptr is not freed, which will cause memory leak, convert to use ERRPTR/PTRERR to pass the instance to callback so no memo...

CVE-2023-53017

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: fix memory leak in hciupdateadvdata When hcicmdsyncqueue failed in hciupdateadvdata, instptr is not freed, which will cause memory leak, convert to use ERRPTR/PTRERR to pass the instance to callback so no memo...

PT-2022-28874

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.16.5 Description A potential security issue has been identified in the Bluetooth functionality, related to the processing of malicious advertisement data. The actual impact and likelihood of a successful attack...

PT-2022-28398

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.228 Description The issue concerns a refactor of malicious advertisement data check in Bluetooth functionality. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-28459

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.96 Description A potential security issue has been identified in the Bluetooth functionality, related to the processing of malicious advertisement data. The actual impact and likelihood of a successful attac...

PT-2022-28425

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.176 Description A potential security issue exists due to the handling of malicious advertisement data in Bluetooth. The actual impact and likelihood of a successful attack have not been confirmed...

PT-2022-28374

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.265 Description The issue concerns a refactor of malicious advertisement data check in Bluetooth. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...