SUSE-SU-2021:3751-1 Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3)

This update for the Linux Kernel 4.4.180-94147 fixes several issues. The following security issues were fixed: - CVE-2021-0935: Fixed use after free that could lead to local escalation of privilege in ip6xmit of ip6output.c bsc1192042. - CVE-2021-3752: Fixed vulnerability in the linux kernel...

SUSE-SU-2021:3735-1 Security update for the Linux Kernel (Live Patch 22 for SLE 15)

This update for the Linux Kernel 4.12.14-15066 fixes several issues. The following security issues were fixed: - CVE-2021-0935: Fixed use after free that could lead to local escalation of privilege in ip6xmit of ip6output.c bsc1192042. - CVE-2021-3752: Fixed vulnerability in the linux kernel...

SUSE-SU-2021:3684-1 Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-19799 fixes several issues. The following security issues were fixed: - CVE-2021-0935: Fixed use after free that could lead to local escalation of privilege in ip6xmit of ip6output.c bsc1192042. - CVE-2021-3752: Fixed vulnerability in the linux kernel...

Intel Corporation: [BrakTooth] Bluetooth vulnerability allows attacker to disconnect or deny reconnection to BT devices connected to a target. Attack #2

This bug was reported directly to Intel Corporation...

The vulnerability of the Linux operating system’s Bluetooth Core Specification kernel, related to deficiencies in authentication procedures, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Linux operating system’s Bluetooth Core Specification kernel is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and compromise its integrity...

SUSE-SU-2021:3389-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a...

The vulnerability of the Bluetooth Classic implementation of the microprogramming software for the Bluetrum AB5301A device allows a intruder to cause a service failure.

The vulnerability of the Bluetooth Classic microprogramming device Bluetrum AB5301A lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung mobile applications. A security vulnerability exists in SAMSUNG SMR, which originated prior to the September 2021 release of SMR, in which some improper access controls exist in th...

CVE-2021-34148

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMPmaxslot with a greater ACL Length after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service...

DEBIAN-CVE-2021-34146

The Bluetooth Classic implementation in the Cypress CYW920735Q60EVB does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service and restart crash of the device by flooding it with LMPAURand packets after the pagi...

UBUNTU-CVE-2021-34148

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMPmaxslot with a greater ACL Length after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service...

Qualcomm 芯片 安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and is often manufactured on the surface of semiconductor wafers. The Qualcomm chip has a security vulnerability that stems from the presence ...

Zhuhai Jieli AC690X输入验证错误漏洞

The Zhuhai Jieli AC690X is a Bluetooth chip. The Zhuhai Jieli AC690X suffers from an input validation error vulnerability that arises from the Bluetooth Classic implementation in the Zhuhai Jieli AC6366CDEMOV1.0 that does not correctly handle the reception of consecutively provided unsolicited LM...

Actions ATS2815 输入验证错误漏洞

The Actions ATS2815 is a Bluetooth chip from Actions. The Actions ATS2815 suffers from an input validation error vulnerability that stems from the Bluetooth Classic implementation on the Actions ATS2815 and ATS2819 chipsets failing to correctly handle the receipt of multiple LMPhostconnectionreq...

Cypress WICED BT输入验证错误漏洞

Cypress WICED BT is a full-featured platform from cypress. The Cypress WICED BT suffers from an input validation error vulnerability that stems from the CYW20735B1 device's Bluetooth Classic implementation via 2.9.0 in the Cypress WICED BT stack failing to correctly handle the reception of an...

USN-5050-1 linux-aws-5.8, linux-azure-5.8, linux-gcp-5.8, linux-oracle-5.8 vulnerabilities

It was discovered that the bluetooth subsystem in the Linux kernel did not properly perform access control. An authenticated attacker could possibly use this to expose sensitive information. CVE-2020-26558, CVE-2021-0129 Michael Brown discovered that the Xen netback driver in the Linux kernel did...

USN-5046-1 linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.11, linux-kvm, linux-oracle, linux-raspi vulnerabilities

It was discovered that the bluetooth subsystem in the Linux kernel did not properly perform access control. An authenticated attacker could possibly use this to expose sensitive information. CVE-2020-26558, CVE-2021-0129 Michael Brown discovered that the Xen netback driver in the Linux kernel did...

Huawei Smartphone 输入验证错误漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI has a Bluetooth protocol stack vulnerability that can be exploited by attackers to cause an infinite loop in DoS...

kernel: use-after-free in net/bluetooth/hci_event.c when destroying an hci_chan

A use-after-free flaw was found in hcisendacl in the bluetooth host controller interface HCI in Linux kernel, where a local attacker with an access rights could cause a denial of service problem on the system The issue results from the object hchan, freed in hcidisconnloglinkcompleteevt, yet stil...

Apple macOS Mojave 缓冲区错误漏洞

Apple macOS Mojave is a set of specialized operating systems developed for Mac computers by Apple USA. Apple macOS Mojave suffers from a buffer error vulnerability that exists due to a boundary error in the Bluetooth implementation. A local application can trigger a memory corruption and execute...