CVE-2018-9365

In smpdatareceived of smpl2c.cc, there is a possible out of bounds read followed by code execution due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

CLSA-2024-1731933167 kernel: Fix of 36 CVEs

smb: client: fix use-after-free in smb2queryinfocompound CVE-2023-52751 - smb: client: prevent new fids from being removed by laundromat CVE-2023-52751 - cifs: fix dentry lookups in directory handle cache CVE-2023-52751 - uprobe: avoid out-of-bounds memory access of fetching args CVE-2024-50067 -...

The vulnerability of the hci_acldata_packet() function in the Linux operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hciacldatapacket function in the net/bluetooth/hcicore.c module of the Linux kernel is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

CVE-2024-51141

An issue in TOTOLINK Bluetooth Wireless Adapter A600UB allows a local attacker to execute arbitrary code via the WifiAutoInstallDriver.exe and MSASN1.dll components...

CVE-2024-51141

An issue in TOTOLINK Bluetooth Wireless Adapter A600UB allows a local attacker to execute arbitrary code via the WifiAutoInstallDriver.exe and MSASN1.dll components...

CVE-2024-51141

An issue in TOTOLINK Bluetooth Wireless Adapter A600UB allows a local attacker to execute arbitrary code via the WifiAutoInstallDriver.exe and MSASN1.dll components...

CVE-2024-51141

CVE-2024-51141 affects TOTOLINK Bluetooth Wireless Adapter A600UB. The issue is tied to WifiAutoInstallDriver.exe and MSASN1.dll, with root cause described as incorrect integrity value checking in MSASN1.dll within the WifiAutoInstallDriver.exe file, enabling a local attacker to execute arbitrary...

Fedora 41 : linux-firmware (2024-3cd42e9e29)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-3cd42e9e29 advisory. Update to upstream 20240909: i915: Update MTL DMC v2.23 cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops amdgpu: Revert sienna cichlid...

PT-2025-3304

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the Bluetooth USB disconnection, where MediaTek claims a special USB intr interface for ISO data...

PT-2024-36898

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the Bluetooth component, specifically in the hci conn module. The fix involves using disable delayed work...

DEBIAN-CVE-2024-24984

Improper input validation for some IntelR Wireless BluetoothR products for Windows before version 23.40 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-24984

Improper input validation for some IntelR Wireless BluetoothR products for Windows before version 23.40 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-24984

Improper input validation for some IntelR Wireless BluetoothR products for Windows before version 23.40 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-24984

CVE-2024-24984: Affected component is Intel Wireless Bluetooth on Windows prior to version 23.40. The issue is improper input validation, which may allow an unauthenticated adjacent attacker to cause a denial-of-service. Exploitation details are not provided in the connected documents; no explici...

CVE-2024-24984

Improper input validation for some IntelR Wireless BluetoothR products for Windows before version 23.40 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-24984

Improper input validation for some IntelR Wireless BluetoothR products for Windows before version 23.40 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-24984

Improper input validation for some IntelR Wireless BluetoothR products for Windows before version 23.40 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

SUSE CVE-2021-21367

Switchboard Bluetooth Plug for elementary OS from version 2.3.0 and before version version 2.3.5 has an incorrect authorization vulnerability. When the Bluetooth plug is running in discoverable mode, Bluetooth service requests and pairing requests are automatically accepted, allowing physically...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-7089-4)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7089-4 advisory. Chenyuan Yang discovered that the USB Gadget subsystem in the Linux kernel did not properly check for the device to be enabled before writing. A local...

switchboard-plug-bluetooth-8.0.1-1.1 on GA media (moderate)

switchboard-plug-bluetooth-8.0.1-1.1 on GA media Announcement ID: openSUSE-SU-2024:14486-1 Rating: moderate Cross-References: CVE-2021-21367 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...