CVE-2026-19291

The CVE-2026-19291 issue affects RS9116W and SiWx91x devices during Bluetooth re-pairing, where re-pairing with an existing device can use a lower security level than the previous pairing. The connection in the documents notes the problem and references the BLERP paper for details, implying a dow...

EUVD-2026-57926

Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below...

CVE-2026-16101 forced re-pairing with already bonded device

Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below...

CVE-2026-16101

The CVE concerns Silicon Labs RS9116W and SiWx917 wireless components. A spoofed, already bonded device can force re-pairing with a rogue device, effectively re-bonding security associations and potentially granting adjacent attackers high-impact access. The vulnerability stems from improper bond...

EUVD-2026-57925

Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below...

The vulnerability of the Linux operating system’s kernel Bluetooth module, allowing a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel Bluetooth module is related to premature resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2026-31450: ext4: publish jinode after initialization bsc1262618. CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on l2capsockreadycb bsc1262603. CVE-2026-31624:...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2022-4994: KVM: x86: wean fast IN from emulatorpioin bsc1273097. CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. CVE-2026-46052: ceph: only dadd...

Linux Distros Unpatched Vulnerability : CVE-2026-68389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciqca: Clear memdump state on invalid dump size qcacontrollermemdump allocates qca-qcamemdump before processing the first dump packet. For a...

Linux Distros Unpatched Vulnerability : CVE-2026-68339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btusb: validate Realtek vendor event length btusbrecveventrealtek reads the event code at data0 and the Realtek subevent code at data2 before decidin...

CVE-2026-66875

In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range approximately 10–30 meters can silently rebind the device to an attacker-controlled account, extract stored hormone measurements in cleartext, cause a denial-of-service via...

CVE-2026-66875

The CVE-2026-66875 entry concerns the Mira hormone monitor firmware v1.7.1.47 (build 01070147). A remote unauthenticated attacker within BLE range (≈10–30 m) can: rebind the device to an attacker-controlled account; extract stored hormone measurements in cleartext; cause a denial-of-service via m...

CVE-2026-18844

The CVE-2026-18844 entry concerns the Pulsetto Vagus Nerve Stimulator firmware, where several undisclosed commands are accepted over BLE without authentication or encryption and are fully processed when powered on. The connected sources offer no details on affected software versions, specific com...

CVE-2026-68339

A flaw was found in the Linux kernel's Bluetooth subsystem btusb driver. An attacker could craft a two-byte vendor event that, due to improper validation of the Realtek vendor event length in the btusbrecveventrealtek function, could lead to the system attempting to read a non-existent third byte...

CVE-2026-68389

A flaw was found in the Bluetooth Host Controller Interface HCI Qualcomm Atheros QCA driver within the Linux kernel. This vulnerability occurs when the controller reports an invalid zero memory dump size, leading to improper state cleanup. An attacker could potentially exploit this to cause memor...

CVE-2026-68394

A flaw was found in the Bluetooth Management MGMT component of the Linux kernel. A use-after-free vulnerability occurs when the MGMTOPLOADCONNPARAM operation queues a connection update. If a subsequent request frees the associated memory before the update is processed, it can lead to a system cra...

CVE-2026-68392

A flaw was found in the Linux kernel's Bluetooth management subsystem. This vulnerability occurs due to incorrect locking when handling memory pointers during device unpairing and disconnection. An attacker could exploit this to trigger a Use-After-Free UAF condition, which is a type of memory...

CVE-2026-68188

A flaw was found in the Linux kernel's Bluetooth RFCOMM subsystem. A race condition in the rfcommttysettermios function allows a session to be freed while it is still actively in use. This use-after-free UAF vulnerability can be exploited by a local attacker. Successful exploitation leads to a...

CVE-2026-68391

A flaw was found in the Linux kernel's Bluetooth management component. This vulnerability involves a Use-After-Free UAF condition, a type of memory corruption where the system attempts to use memory after it has been freed. This can occur due to improper handling of hciconn pointers, potentially...

CVE-2026-68189

A flaw was found in the Bluetooth hcisync component of the Linux kernel. A race condition during the UUID list traversal, caused by improper synchronization between asynchronous command sync work and UUID list updates, can lead to a use-after-free vulnerability. This could allow a local attacker ...