PT-2025-54043

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's Bluetooth L2CAP implementation that could lead to a user-after-free condition. This issue arises from scenarios where a buffer is allocated using allo...

PT-2025-53993

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to Bluetooth ISO Isochronous connections. Specifically, the issue involves incorrect locking and validity checks concerning the sk state variable...

PT-2025-54026

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A fix for a Bluetooth use-after-free issue in the btsdio module was reverted due to a potential null-pointer-dereference problem introduced by the patch. The original bug was addressed b...

PT-2025-53951

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue related to Bluetooth handling. Specifically, the scheduling of work items within the Bluetooth HCI Host Controller Interface subsystem was flawed. A...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of post-release reuse of Bluetooth L2CAP...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992213)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992213 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free Fix potential use-after-free in l2caplecommandrej. Tenable h...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the presence of post-release reuse of Bluetooth hcisync...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992272)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992272 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free caused by l2capreassemblesdu Fix the race condition between...

Unity Linux 20.1060e Security Update: kernel (UTSA-2025-992524)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992524 advisory. A race condition was found in the Linux kernel's net/bluetooth in sniffmin,maxintervalset function. This can result in a bluetooth sniffing exception issue, possibly...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992593)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992593 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix bad unlock balance in l2capdisconnectrsp conn-chanlock isn't acquired befor...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992512)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992512 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix user-after-free This uses l2capchanholdunlesszero after calling...

Linux Distros Unpatched Vulnerability : CVE-2022-50833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: use hdev-workqueue when queuing hdev-cmd,ncmdtimer works syzbot is reporting attempt to schedule hdev-cmdwork work from systemwq WQ into hdev-workque...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992534)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992534 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times deviceadd shall not be calle...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992252)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992252 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcildisc,serdev: check percpuinitrwsem failure syzbot is reporting NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2023-54210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcisync: Avoid use-after-free in dbg for hciremoveadvmonitor KASAN reports that there's a use-after-free in hciremoveadvmonitor. Trawling through the...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2025:4320-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4320-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: -...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992338)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992338 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btsdio: fix use after free bug in btsdioremove due to race condition In btsdioprobe, t...

CVE-2025-68473

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the ESP-IDF Bluetooth host stack BlueDroid, the function btadmsdpresult used a fixed-size array uuidlist32MAXUUIDSIZE to store discovered service UUIDs during the...

CVE-2025-68473

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In versions 5.5.1, 5.4.3, 5.3.4, 5.2.6, 5.1.6, and earlier, in the ESP-IDF Bluetooth host stack BlueDroid, the function btadmsdpresult used a fixed-size array uuidlist32MAXUUIDSIZE to store discovered service UUIDs during the...

PT-2025-53616

This vulnerability is: CVE-2025-34462 Found by nsm barii me This vulnerability is possible because of the fact that ble devices use services to communicate over ble. I will be looking more into this, follow for more CyberSecurity EthicalHacking https://t.co/UbGAilGo1B...