CVE-2026-98296

A flaw was found in the Linux kernel's Intel PCIe Bluetooth driver. The driver fails to validate the size of outgoing transmission packets before copying them into a fixed Direct Memory Access DMA buffer. A local attacker could exploit this issue by submitting oversized packets, triggering a buff...

CVE-2026-98294

A flaw was found in the Linux kernel's Qualcomm Bluetooth driver. Under specific error-recovery conditions, unbinding the driver after a device failure causes the system to write data to an already closed serial port. A local user could trigger this condition, resulting in a null-pointer...

CVE-2023-21739

CVE-2023-21739 Vulnerabilidad de elevación de privilegios del controlador Bluetooth de Windows. autenticación| complejidad| vector ---|---|--- no disponible| no disponible| no disponible confidencialidad| integridad| disponibilidad ---|---|--- no disponible| no disponible| no disponible Puntuació...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel before version 5.16.3, the driver/bluetooth/hciqca.c file misinterprets the return value of devmgpiodgetindexoptional. It expects the return value to be NULL in the error case, but in reality, it is an error pointer...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10, Linux-6.1

A issue was discovered in the driver/bluetooth/hcildisc.c file within the Linux kernel 6.2. In hciuartttyioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. The HCIUARTPROTOSET function is called before hu-proto is set. A NULL pointer dereferencing may occur...

CVE-2026-97908

A flaw was found in the Linux kernel's Qualcomm SMD Bluetooth driver. An improper cleanup sequence frees the core Bluetooth device structure before shutting down communication endpoints during device removal or initialization errors. If incoming data arrives during this teardown window, the drive...

CVE-2026-97907

A flaw was found in the Linux kernel's Realtek Bluetooth driver. When processing firmware images on hardware where the chip key identifier is zero, the driver incorrectly manages loop control and evaluates an uninitialized or stale return code. A local user capable of providing firmware or...

CVE-2026-98111

A flaw was found in the Linux kernel's Intel Bluetooth driver. When processing version response packets from hardware, the driver fails to verify that Type-Length-Value TLV data fields meet the minimum required length. A malicious or rogue Bluetooth controller can supply a crafted response with...

CVE-2026-98110

A flaw was found in the Linux kernel's Intel Bluetooth driver. An attacker with a malicious or compromised Bluetooth device could exploit this vulnerability by providing a crafted response during firmware initialization that lacks a null terminator. Because the driver treats the firmware identifi...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

A race condition was detected in the Linux kernel’s net/bluetooth device driver, specifically in the conninfomin,maxageset function. This can lead to an integrity overflow issue, potentially causing abnormal Bluetooth connections or denial of service...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

A race condition was detected in the Bluetooth device driver of the Linux kernel’s min,maxkeysizeset function. This can lead to a null pointer dereferencing issue, potentially causing a kernel panic or a denial-of-service attack...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

A use-after-free flaw was discovered in btsdioremove in the drivers\bluetooth\btsdio.c file within the Linux kernel. In this flaw, calling btsdioremove with an unfinished job may lead to a race condition, resulting in a User Account Fault UAF on HDev devices...

The vulnerability of the hci_uart_register_dev() function in the drivers/bluetooth/hci_ldisc.c device driver of the Linux operating system’s Bluetooth kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hciuartregisterdev function in the drivers/bluetooth/hcildisc.c device driver of the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the btsdioremove() function in the drivers/bluetooth/btsdio.c driver for Bluetooth devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the btsdioremove function in the drivers/bluetooth/btsdio.c driver for Bluetooth devices in Linux operating systems is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the btmtk_usb_hci_wmtSync() function in the drivers/bluetooth/btmtk.c module of the Linux kernel’s Bluetooth device driver allows a attacker to disclose confidential information or cause service failures.

The vulnerability of the btmtkusbhciwmtSync function in the drivers/bluetooth/btmtk.c module of the Linux Bluetooth kernel driver is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to disclose sensitive information or...

The vulnerability of the download_firmware() function in the drivers/bluetooth/hci_ll.c driver for Bluetooth devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the downloadfirmware function in the drivers/bluetooth/hcill.c file of the Bluetooth device driver for the Linux operating system is related to incomplete filtering of special elements. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Fixed a NULL pointer dereferencing in qcasetup, which occurred for non-serdev devices. For devices connected via non-serdev paths, hu-serdev is NULL. However, qcasetup serdevdevicegetdrvdatahu-serdev and...

CVE-2026-74301

A flaw was found in the Linux kernel's Bluetooth driver. An error in handling Bluetooth packets can cause a memory leak, where a data structure is not properly released. This continuous leakage of memory could potentially lead to system instability or a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2026-74304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: fix NULL pointer dereference in qcasetup for non-serdev device hu-serdev ...

Linux Distros Unpatched Vulnerability : CVE-2026-74301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: fix URB leak in allocmtkintrurb error path When btmtkisopktpad fails, the...