CVE-2023-53297

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2capdisconnectrsp conn-chanlock isn't acquired before l2capgetchanbyscid, if l2capgetchanbyscid returns NULL, then 'bad unlock balance' is triggered...

Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()

...

CVE-2025-0079

In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

LSN-0114-1 Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: bfq: fix use-after-free in bfqdispatchrequest KASAN reports a use-after-free report when doing normal scsi-mq test . In the Linux kernel, the following vulnerability has been resolved: block, bfq: don't move oombfqq Our test repo...

Linux Distros Unpatched Vulnerability : CVE-2022-49910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: L2CAP: Fix use-after-free caused by l2capreassemblesdu Fix the race condition between the following two flows that run in parallel: 1...

Linux Distros Unpatched Vulnerability : CVE-2022-49909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix use-after-free in l2capconndel When l2caprecvframe is invoked to recei...

The vulnerability of the OpenSynergy BlueSDK Bluetooth protocol stack, which allows a hacker to disclose protected information

The vulnerability of the OpenSynergy BlueSDK Bluetooth protocol lies in the improper handling of exceptional states. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

The vulnerability of the OpenSynergy BlueSDK Bluetooth protocol stack allows a hacker to circumvent existing security restrictions and create a L2CAP channel.

The vulnerability of the OpenSynergy BlueSDK Bluetooth protocol lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and create a L2CAP channel...

CVE-2025-2818

A vulnerability was reported in version 1.0 of the Bluetooth Transmission Alliance protocol adopted by Motorola Smart Connect Android Application that could allow a nearby attacker within the Bluetooth interaction range to intercept files when transferred to a device not paired in Smart Connect...

CVE-2025-2818

A vulnerability was reported in version 1.0 of the Bluetooth Transmission Alliance protocol adopted by Motorola Smart Connect Android Application that could allow a nearby attacker within the Bluetooth interaction range to intercept files when transferred to a device not paired in Smart Connect...

Motorola Smart Connect Android Application 安全漏洞

The Motorola Smart Connect Android Application is an Android application from Motorola, Inc. that is used to seamlessly interconnect devices. A security vulnerability exists in the Motorola Smart Connect Android Application version 1.0, which stems from mishandling of the Bluetooth transfer...

Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059179 fixes several issues. The following security issues were fixed: CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inetcreate bsc1235231. CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing...

CVE-2025-44531

An issue in Realtek RTL8762EKF-EVB RTL8762E SDK v1.4.0 allows attackers to cause a Denial of Service DoS via sending a crafted before a pairing public key is received during a Bluetooth connection attempt...

SONY XAV-AX8500 Input Validation Error Vulnerability

The SONY XAV-AX8500 is a car AV receiver with enhanced features. The SONY XAV-AX8500 suffers from an input validation error vulnerability that stems from an improper implementation of the Bluetooth SDP protocol resulting in an integer overflow, which can be exploited by an attacker to execute...

CVE-2025-5479

Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicio...

CVE-2025-5477

Sony XAV-AX8500 Bluetooth L2CAP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicious Bluetooth devi...

CVE-2025-5478 Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability

Sony XAV-AX8500 Bluetooth SDP Protocol Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. Authentication is not required to exploit this vulnerability. The...

CVE-2025-5479 Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability

Sony XAV-AX8500 Bluetooth AVCTP Protocol Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sony XAV-AX8500 devices. An attacker must first obtain the ability to pair a malicio...

Sony XAV-AX8500 安全漏洞

The SONY XAV-AX8500 is a car AV receiver with enhanced features. The SONY XAV-AX8500 suffers from a heap buffer overflow vulnerability that stems from an improper implementation of the Bluetooth L2CAP protocol, which can be exploited by an attacker to execute arbitrary code...

Sony XAV-AX8500 安全漏洞

The SONY XAV-AX8500 is a car AV receiver with enhanced features. The SONY XAV-AX8500 suffers from a heap buffer overflow vulnerability that stems from an improper implementation of the Bluetooth AVCTP protocol, which can be exploited by an attacker to execute arbitrary code...