CVE-2025-12890 Bluetooth: peripheral: Invalid handling of malformed connection request

Improper handling of malformed Connection Request with the interval set to be 1 which supposed to be illegal and the chM 0x7CFFFFFFFF triggers a crash. The peripheral will not be connectable after it...

CVE-2025-12890

CVE-2025-12890 affects Zephyr-related Bluetooth peripherals. The public data describe an improper handling of a malformed Connection Request when the interval is 1 and the chM mask is 0x7CFFFFFFFF, which triggers a crash and renders the peripheral non-connectable. This vulnerability is described ...

USN-7861-2: Linux kernel (Real-time) vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

USN-7861-2 linux-realtime, linux-realtime-6.8 vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

USN-7864-1: Linux kernel (GCP and GKE) vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

USN-7864-1 linux-gcp, linux-gcp-6.8, linux-gke vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-7861-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7861-1 advisory. Jean-Claude Graf, Sandro Regge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor...

USN-7861-1: Linux kernel vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

USN-7861-1 linux, linux-aws, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia, linux-nvidia-lowlatency vulnerabilities

Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered that the Linux kernel contained insufficient branch predictor isolation between a guest and a userspace hypervisor for certain processors. This flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this t...

PT-2026-30155

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's Bluetooth L2CAP implementation, specifically within the l2cap unregister user function. A race condition occurs because l2cap register user and l2cap...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990617)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990617 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Fix null ptr deref in btintelreadversion If hcicmdsynccomplete is triggered a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990626)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990626 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix possible buffer overflow struct hcidevinfo has a fixed size name8 field s...

CVE-2025-47370

Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988657)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988657 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix use-after-free in l2capconndel When l2caprecvframe is invoked to receive...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989860)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989860 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Fix null ptr deref in btintelreadversion If hcicmdsynccomplete is triggered a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989963)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989963 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicore: Fix possible buffer overflow struct hcidevinfo has a fixed size name8 field s...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988913)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988913 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use after free in hcisendacl This fixes the following trace caused by receiving...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990213)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990213 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: rfcomm: Fix null-ptr-deref in rfcommchecksecurity During our fuzz testing of the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989210)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989210 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Fix driver shutdown on closed serdev The driver shutdown callback which sends...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988772)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988772 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Add date-evtskb is NULL check fix crash because of null pointers 6104.969662 BU...