PT-2026-61263

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth ISO implementation. The iso recv frame function reads the conn-sk pointer while holding the iso conn lock but releases the lock before...

CVE-2026-64127: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: ecredreconfigure: send packed pdu, not stack pointer Commit 1c08108f3014 "Bluetooth: L2CAP: Avoid -Wflex-array-member-not-at-end warnings" converted the on-stack request PDU in l2capecredreconfigure from an...

SUSE SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:3089-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3089-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: -...

BLE GATT Fuzz

Fuzzes writable GATT characteristics with mutated payloads to probe firmware input handling disconnects, errors, anomalous notifies !/usr/bin/env python3 -- coding: utf-8 -- """ BLE GATT Fuzzer — mutates writes against writable characteristics on a live BLE session. """ from future import...

BLE GATT Attack Surface

Analyzes GATT services and characteristics for risky read/write/notify exposure !/usr/bin/env python3 -- coding: utf-8 -- """BLE analyze — rank the GATT attack surface exposed by a BLE session.""" from kittysploit import from lib.protocols.ble.blesessionmixin import BleSessionMixin from datetime...

BleedingTooth Check

Assesses local Linux Bluetooth/kernel exposure to the BleedingTooth family CVE-2020-12351 BadKarma, CVE-2020-12352 BadChoice, CVE-2020-24490 BadVibes. Detection only — no exploit payload. !/usr/bin/env python3 -- coding: utf-8 -- """ BleedingTooth exposure check — local Linux kernel Bluetooth sta...

BLE GATT Services

Enumerates GATT services exposed by a connected BLE peripheral !/usr/bin/env python3 -- coding: utf-8 -- """BLE gather — list GATT services on a connected peripheral.""" from kittysploit import from lib.protocols.ble.blesessionmixin import BleSessionMixin import json class ModulePost,...

BLE GATT Client

Connects to a Bluetooth Low Energy peripheral over GATT and creates a session for service enumeration, read/write, and notify capture !/usr/bin/env python3 -- coding: utf-8 -- """BLE GATT bind listener — connects to a peripheral and opens a GATT session.""" from kittysploit import from...

BLE GATT Characteristics

Enumerates GATT characteristics UUID, handle, properties for a BLE session !/usr/bin/env python3 -- coding: utf-8 -- """BLE gather — list GATT characteristics and properties.""" from kittysploit import from lib.protocols.ble.blesessionmixin import BleSessionMixin import json class ModulePost,...

BLE Read Characteristic

Reads a GATT characteristic value from a connected BLE peripheral !/usr/bin/env python3 -- coding: utf-8 -- """BLE manage — read a GATT characteristic value.""" from kittysploit import from lib.protocols.ble.blesessionmixin import BleSessionMixin from lib.protocols.ble.bleclient import...

BLE Write Characteristic

Writes a value to a GATT characteristic on a connected BLE peripheral !/usr/bin/env python3 -- coding: utf-8 -- """BLE manage — write a GATT characteristic value.""" from kittysploit import from lib.protocols.ble.blesessionmixin import BleSessionMixin from lib.protocols.ble.bleclient import...

BLE Notify Capture

Subscribes to GATT notifications/indications and captures values for a timed window !/usr/bin/env python3 -- coding: utf-8 -- """BLE gather — subscribe to notifications/indications and capture traffic.""" from kittysploit import from lib.protocols.ble.blesessionmixin import BleSessionMixin from...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: CVE-2026-31771: Bluetooth: Ignore HCIERRORCANCELLEDBYHOST on adv set terminated event bsc1264145. CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach...

SUSE-SU-2026:3089-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31771: Bluetooth: Ignore HCIERRORCANCELLEDBYHOST on adv set terminated event bsc1264145. - CVE-2026-43038: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach...

Bluetooth Service Privilege Escalation

The vulnerability of the Bluetooth service for Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2024-34268

EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth connections. This vulnerability allows attackers to gain full access to the device without authentication...

kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold

A flaw was found in the Linux kernel's Bluetooth SCO Synchronous Connection-Oriented protocol implementation. The scorecvframe function fails to properly hold a reference to a socket after releasing a lock. This oversight allows a concurrent operation to free the socket while it is still being...

CVE-2024-34268

EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth connections. This vulnerability allows attackers to gain full access to the device without authentication...

CVE-2024-34268

CVE-2024-34268 affects the EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat. The issue is that firmware up to 1.46 allows unsecured Bluetooth connections, enabling attackers to gain full access to the device without authentication. The CVSS v3.1 metrics from the entry indicate: AV Adjacen...

RHEL 8 : kernel (RHSA-2026:40760)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:40760 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ima: don't clear IMADIGSIG fl...