SUSE-SU-2025:02075-1 Security update for the Linux Kernel (Live Patch 59 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122225 fixes several issues. The following security issues were fixed: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inetcreate bsc1235231. - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing...

CVE-2024-6442

In ascscprspadd in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow...

CVE-2023-41820

An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices...

CVE-2024-6442

In ascscprspadd in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow...

UBUNTU-CVE-2024-6442

In ascscprspadd in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow...

CVE-2024-6442 Bluetooth: ASCS Unchecked tailroom of the response buffer

In ascscprspadd in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow...

CVE-2023-41820

An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices...

PUB-A-329067188

In multiple locations, there is a possible way to use a paired Bluetooth LE audio device to achieve code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

January 23, 2024—KB5034204 (OS Builds 22621.3085 and 22631.3085) Preview

None None...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a lack of bounds checking in the code conversion QToFloat in the btifavrcpaudiotrack.cc script, which can be exploited by an attacker to gain elevat...

May 24, 2023—KB5026446 (OS Build 22621.1778) Preview

None None...

SUSE CVE-2018-16058

In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly initializing a data structure...

August 25, 2022—KB5016691 (OS Build 22000.918) Preview

None None...

January 25, 2022—KB5008353 (OS Build 22000.469) Preview

None None...

CVE-2021-0999

In the broadcast definition in AndroidManifest.xml, there is a possible way to set the A2DP bluetooth device connection state due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

November 22, 2021—KB5007262 (OS Build 22000.348) Preview

None None...

September 10, 2019—KB4515384 (OS Build 18362.356)

None None...

July 26, 2019—KB4505903 (OS Build 18362.267)

None None...

DMA[2005-1214a] - 'Widcomm BTW - Bluetooth for Windows Remote Audio Eavesdropping'

DMA2005-1214a - 'Widcomm BTW - Bluetooth for Windows Remote Audio Eavesdropping' Author: Kevin Finisterre Vendor: http://www.widcomm.com, http://www.broadcom.com/products/Bluetooth/ Product: 'versions = BTW 4.0.1.1500 ?' References: http://www.digitalmunition.com/DMA2005-1214a.txt Description: Wh...