Linux Distros Unpatched Vulnerability : CVE-2026-98297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcicore: Fix queuing txwork after workqueue is drained hcisendacl, hcisendsco and hcisendiso queue hdev-txwork unconditionally. They can run from the...

ROS-20261006-73-0091

The vulnerability of the functions sessionfree, hidpsessionRemove, and hidpSessionThread in the net/bluetooth/hidp/core.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a...

Android 11 Bluetooth HID Input Injection

Android version 11 devices lacking the December 2023 security update may accept unauthorized Bluetooth HID keyboard input, allowing keystroke injection through a vulnerable Bluetooth HID implementation...

PT-2026-106622

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in iso conn ready iso get sock returns the parent socket with a reference held, which is dropped by sock put once the child socket has been set up. The error path taken when iso sock alloc...

PT-2026-106626

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci core: Fix queuing tx work after workqueue is drained hci send acl, hci send sco and hci send iso queue hdev-tx work unconditionally. They can run from the L2CAP/SCO/ISO socket send path while hci dev close sync is...

PT-2026-106624

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: coredump: Quiesce dump work on unregister hci devcd handle pkt init arms dump timeout and coredump producers queue dump rx without holding an hdev reference. Unregister leaves both works live, so disconnecting during a...

PT-2026-106575

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci sync: Serialize local codec list cleanup hci dev close sync clears hdev-local codecs after releasing hdev-lock. Codec list additions and both traversals in sco sock getsockopt use that lock, but the close path does...

Linux Distros Unpatched Vulnerability : CVE-2026-98296

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btintelpcie: validate TX skb length in sendsync btintelpciepreparetx copies skb-len bytes into a fixed BTINTELPCIEBUFFERSIZE 4096 DMA slot via an...

Linux Distros Unpatched Vulnerability : CVE-2026-98292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access btmtksdio.c and btmtkuart.c cast a received WMT event straight to struct...

Linux Distros Unpatched Vulnerability : CVE-2026-98247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcicodec: validate vendor codec count length The Read Local Supported Codecs parsers consume the variable-sized standard codec array before parsing t...

CVE-2026-98293: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in isoconnready isogetsock returns the parent socket with a reference held, which is dropped by sockput once the child socket has been set up. The error path taken when isosockalloc fails on...

PT-2026-106576

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci codec: validate vendor codec count length The Read Local Supported Codecs parsers consume the variable-sized standard codec array before parsing the vendor codec count. Although the initial reply-size check include...

PT-2026-106620

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel pcie: fix off-by-one bounds check in RX submit btintel pcie submit rx used frbd index rxq-count to guard the FRBD array access, allowing frbd index == rxq-count to pass through and index one element past the en...

PT-2026-106987

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Bluetooth component allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update Googl...

Linux Distros Unpatched Vulnerability : CVE-2026-98246

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: Serialize local codec list cleanup hcidevclosesync clears hdev-localcodecs after releasing hdev-lock. Codec list additions and both traversa...

Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_65334)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202665334 advisory. kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: Bluetooth: SMP: force responder MITM requirements before buildin...

Linux Distros Unpatched Vulnerability : CVE-2026-98293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: Fix parent socket leak in isoconnready isogetsock returns the parent socket with a reference held, which is dropped by sockput once the child...

Linux Distros Unpatched Vulnerability : CVE-2026-98290

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup rfcommsockcleanuplisten closes unaccepted child sockets through rfcommsockclose, which takes...

Linux Distros Unpatched Vulnerability : CVE-2026-98295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: coredump: Quiesce dump work on unregister hcidevcdhandlepktinit arms dumptimeout and coredump producers queue dumprx without holding an hdev referenc...

Linux Distros Unpatched Vulnerability : CVE-2026-98294

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciqca: Do not write to the serial port after it is closed hciuartclose closes the serdev port if HCIQUIRKNONPERSISTENTSETUP is set for example, for...