CVE-2026-46111

A flaw was found in the Linux kernel's Bluetooth subsystem. The createbigcomplete function, when handling errors during the creation of a Bluetooth Isochronous Group BIG synchronization, could attempt to access memory that has already been freed. This use-after-free UAF vulnerability could allow ...

CVE-2026-46111 Bluetooth: hci_conn: fix potential UAF in create_big_sync

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix potential UAF in createbigsync Add hciconnvalid check in createbigsync to detect stale connections before proceeding with BIG creation. Handle the resulting -ECANCELED in createbigcomplete and re-validate...

SUSE CVE-2024-42133

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Ignore too large handle values in BIG hcilebigsyncestablishedevt is necessary to filter out cases where the handle value is belonging to ida id range, otherwise ida will be erroneously released in hciconncleanup...