Lucene search
K

38 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.1 views

Astra Linux - уязвимость в linux-6.1, linux-5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: SCO: Fixed UAF in scosocktimeout. The conn-sk might have been unlinked/freed while waiting for scoconnlock. Therefore, this check determines whether conn-sk is still valid by verifying that it is part of scosklist...

7.8CVSS6.8AI score0.00019EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/01 2:15 p.m.27 views

CVE-2026-43023 Bluetooth: SCO: fix race conditions in sco_sock_connect()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: fix race conditions in scosockconnect scosockconnect checks skstate and sktype without holding the socket lock. Two concurrent connect syscalls on the same socket can both pass the check and enter scoconnect,...

7.8CVSS0.00014EPSS
Exploits0References6
OSV
OSV
added 2026/04/22 5:0 p.m.1 views

SUSE-SU-2026:21293-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-25.1 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on scoconnfree bsc1255066. - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management...

7.8CVSS5.6AI score0.00033EPSS
Exploits0References5
OSV
OSV
added 2026/04/18 5:34 a.m.1 views

SUSE-SU-2026:1447-1 Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 fixes various security issues The following security issues were fixed: - CVE-2025-40309: Bluetooth: SCO: Fix UAF on scoconnfree bsc1255066. - CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy manageme...

7.8CVSS6.1AI score0.00033EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/01/09 11:23 a.m.2 views

CVE-2021-31786

The Bluetooth Classic Audio implementation on Actions ATS2815 and ATS2819 devices does not properly handle a connection attempt from a host with the same BDAddress as the current connected BT host, allowing attackers to trigger a disconnection and deadlock of the device by connecting with a forge...

6.5CVSS6.8AI score0.00104EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/12/25 12:57 a.m.2 views

SUSE CVE-2023-54036

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU The wifi + bluetooth combo chip RTL8723BU can leak memory especially? when it's connected to a bluetooth audio device. The busy bluetooth traffic generates lots of C2H ca...

5.5CVSS6.3AI score0.00034EPSS
Exploits0References7
NVD
NVD
added 2025/12/24 11:15 a.m.3 views

CVE-2023-54036

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU The wifi + bluetooth combo chip RTL8723BU can leak memory especially? when it's connected to a bluetooth audio device. The busy bluetooth traffic generates lots of C2H ca...

0.00034EPSS
Exploits0References5
OSV
OSV
added 2025/12/24 10:56 a.m.1 views

CVE-2023-54036 wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU The wifi + bluetooth combo chip RTL8723BU can leak memory especially? when it's connected to a bluetooth audio device. The busy bluetooth traffic generates lots of C2H ca...

6.2AI score0.00034EPSS
Exploits0References8
Microsoft CVE
Microsoft CVE
added 2025/12/09 1:1 a.m.2 views

Bluetooth: SCO: Fix UAF on sco_conn_free

...

7AI score0.00033EPSS
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-23488

Malicious code in bioql PyPI...

8.8CVSS7.7AI score0.00214EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-47541

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00144EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-46312

Malicious code in bioql PyPI...

5CVSS6.6AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/06 7:31 a.m.1 views

CVE-2025-20701

In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS7.8AI score0.00214EPSS
Exploits0References1
NVD
NVD
added 2025/08/04 7:15 a.m.2 views

CVE-2025-20701

In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS0.00214EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/04 6:20 a.m.1 views

CVE-2025-20702

In the Airoha Bluetooth audio SDK, there is a possible unauthorized access to the RACE protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.6AI score0.00256EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/04 6:20 a.m.1 views

CVE-2025-20701

In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8AI score0.00214EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/08/04 6:20 a.m.4 views

CVE-2025-20701

In the Airoha Bluetooth audio SDK, there is a possible way to pair Bluetooth audio device without user consent. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00214EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/04 6:19 a.m.1 views

CVE-2025-20700

In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protocol through Bluetooth LE GATT service. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.7AI score0.00164EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/04 12:0 a.m.2 views

Airoha Bluetooth audio SDK 安全漏洞

Airoha Bluetooth audio SDK is a software development kit from Airoha. Airoha Bluetooth audio SDK has a security vulnerability that originates from a privilege bypass that could lead to remote elevation of privilege...

8.8CVSS7.7AI score0.00164EPSS
Exploits0References2
SUSE Linux
SUSE Linux
added 2025/06/26 2:3 p.m.1 views

Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059179 fixes several issues. The following security issues were fixed: CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inetcreate bsc1235231. CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing...

8.5CVSS8AI score0.0004EPSS
Exploits0References28
Rows per page
Query Builder