CVE-2026-43069 Bluetooth: hci_ll: Fix firmware leak on error path

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcill: Fix firmware leak on error path Smatch reports: drivers/bluetooth/hcill.c:587 downloadfirmware warn: 'fw' from requestfirmware not released on lines: 544. In downloadfirmware, if requestfirmware succeeds but the...

PT-2026-37072

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak exists in the Bluetooth component. In the download firmware function, if request firmware succeeds but the returned firmware content is invalid, such as having no data or...

Linux Distros Unpatched Vulnerability : CVE-2026-43069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcill: Fix firmware leak on error path Smatch reports: drivers/bluetooth/hcill.c:587 downloadfirmware warn: 'fw' from requestfirmware not released on...

MiracleLinux 8 : linux-firmware-20200619-101.git3890db36.el8 (AXSA:2021-1383:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1383:03 advisory. hardware: buffer overflow in bluetooth firmware CVE-2020-12321 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 7 : linux-firmware-20200421-80.git78c0348.el7 (AXSA:2021-1366:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1366:02 advisory. hardware: buffer overflow in bluetooth firmware CVE-2020-12321 Tenable has extracted the preceding description block directly from the MiracleLinux security...

Fedora: Security Advisory (FEDORA-2026-2cebf295af)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : linux-firmware (2026-1d240112ff)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1d240112ff advisory. Update to 20260110: update firmware for MT7925 WiFi device mediatek MT7925: update bluetooth firmware to 20260106153314 mediatek MT7920: update bluetooth...

EUVD-2025-202589

An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to cause a Denial of Service DoS via sending a crafted Link Manager Protocol LMP packet...

CVE-2025-63895

An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to cause a Denial of Service DoS via sending a crafted Link Manager Protocol LMP packet...

CVE-2025-63895

An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to cause a Denial of Service DoS via sending a crafted Link Manager Protocol LMP packet...

PT-2025-50488

Name of the Vulnerable Software and Affected Versions JXL 9 Inch Car Android Double Din Player version 12.0 Description An issue in the Bluetooth firmware allows attackers to cause a Denial of Service DoS by sending a crafted Link Manager Protocol LMP packet. A crafted LMP packet is a specific ty...

CVE-2025-63895

An issue in the Bluetooth firmware of JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to cause a Denial of Service DoS via sending a crafted Link Manager Protocol LMP packet...

CVE-2025-65824

The CVE describes an unauthenticated proximity attack against the Meatmeet device where an adversary can perform an unauthorized OTA firmware upgrade over BLE. The upgrade mechanism does not verify authenticity, allowing the attacker to overwrite the device firmware with their code and trigger Re...

JXL 9 Inch Car Android Double Din Player 安全漏洞

JXL 9 Inch Car Android Double Din Player is an in-car infotainment system from JXL. A security vulnerability exists in JXL 9 Inch Car Android Double Din Player Android v12.0, which stems from a flaw in the Bluetooth firmware that could lead to a denial of service attack...

CVE-2025-63895

The CVE-2025-63895 issue affects the JXL 9 Inch Car Android Double Din Player (Android v12.0) with Bluetooth Classic stack. A flaw in the Bluetooth firmware’s LMP handling (LMP implementation) can be exploited by an attacker in Bluetooth range to trigger a denial-of-service during connection setu...

EUVD-2020-24974

Malware in sbrugna...

EUVD-2021-10289

Malware in sbrugna...

EUVD-2025-11210

Malicious code in bioql PyPI...

EUVD-2025-20358

Malicious code in bioql PyPI...

EUVD-2025-20357

Malicious code in bioql PyPI...