Lucene search
K

12 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.1 views

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: RFCOMM: No fix to ensure that user input is validated before setting the setsockopt function. The syzbot reported that the rfcommsocksetsockoptold function copies data without checking the length of the user input...

7.1CVSS6.4AI score0.00258EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:0 a.m.3 views

Siemens SCALANCE and RUGGEDCOM Improper Input Validation (CVE-2025-39860)

"In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in l2capsockcleanuplisten syzbot reported the splat below without a repro. In the splat, a single thread calling btacceptdequeue freed sk and touched it after that. The root cause would be the racy...

7.8CVSS6.3AI score0.00152EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/01/15 12:0 a.m.3 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002141)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002141 advisory. The rfcommsockbind function in net/bluetooth/rfcomm/sock.c in the Linux kernel before 4.2 allows local users to obtain sensitive information or cause a denial of...

6.1CVSS6.8AI score0.00225EPSS
Exploits0References9
UbuntuCve
UbuntuCve
added 2025/12/16 4:16 p.m.1 views

CVE-2025-68305

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisock: Prevent race in socket write iter and sock bind There is a potential race condition between sock bind and socket write iter. bind may free the same cmd via mgmtpending before write iter sends the cmd, just as...

5.9AI score0.00156EPSS
Exploits0References22
OSV
OSV
added 2025/06/24 2:52 p.m.2 views

SUSE-SU-2025:20449-1 Security update for kernel-livepatch-MICRO-6-0_Update_4

This update for kernel-livepatch-MICRO-6-0Update4 fixes the following issues: - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2capsockcreate bsc1235062 - CVE-2024-56582: btrfs: fix use-after-free in btrfsencodedreadendio bsc1235129 - CVE-2024-56601: net: inet: do...

7.8CVSS6.7AI score0.00236EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.5 views

The vulnerability of the bt_sock_recvmsg() function in the net/bluetooth/af_bluetooth.c module of the Linux Bluetooth subsystem allows a hacker to cause a service failure.

The vulnerability of the btsockrecvmsg function in the net/bluetooth/afbluetooth.c module of the Linux Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to cause service failures...

6.5CVSS6.7AI score0.00489EPSS
Exploits0References41Affected Software4
Zero Day Initiative
Zero Day Initiative
added 2024/12/10 12:0 a.m.4 views

Linux Kernel Bluetooth HCI Request Race Condition Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

7.5CVSS7.5AI score
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2024/06/30 2:0 p.m.3 views

bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition.

...

7CVSS6.6AI score0.0026EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2024/01/25 11:4 a.m.1 views

kernel: use-after-free in l2cap_sock_release in net/bluetooth/l2cap_sock.c

A flaw was found in l2capsockrelease in net/bluetooth/l2capsock.c in the Bluetooth subsystem in the Linux Kernel. This issue may allow a user to cause a use-after-free problem due to sk's children being mishandled...

7.8CVSS6.6AI score0.0056EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2021/03/16 12:0 a.m.6 views

PT-2021-8006 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.12.0-rc1-00026-g73d464503354 Description: The issue is related to a potential deadlock between the hci dev-lock and socket lock in the Linux kernel's Bluetooth functionality. This deadlock can occur due to a...

7.8CVSS6.7AI score0.01549EPSS
Exploits5References813
Tenable Nessus
Tenable Nessus
added 2018/07/12 12:0 a.m.63 views

OracleVM 3.3 : Unbreakable / etc (OVMSA-2018-0237)

The remote OracleVM system is missing necessary patches to address critical security updates : - dm: fix race between dmgetfromkobject and dmdestroy Hou Tao CVE-2017-18203 - drm: udl: Properly check framebuffer mmap offsets Greg Kroah-Hartman Orabug: 27986407 CVE-2018-8781 - kernel/exit.c: avoid...

7.8CVSS7.2AI score0.04252EPSS
Exploits18References23
Tenable Nessus
Tenable Nessus
added 2005/06/10 12:0 a.m.48 views

SUSE-SA:2005:029: kernel

The remote host is missing the patch for the advisory SUSE-SA:2005:029 kernel. The Linux kernel is the core component of the Linux system. This update fixes various security as well as non-security problems discovered since the last round of kernel updates. The following security problems have be...

7.2CVSS5.9AI score0.01774EPSS
Exploits2
Rows per page
Query Builder