23723 matches found
fwbt
fwbt Writeup: https://www.labs.greynoise.io/grimoire/2024-08-20-bluuid-firewalla/ Proof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024-40892 / CVE-2024-40893 Without any configuration it will scan for Firewalla's in local proximity and leak th...
CVE-2026-98392
A flaw was found in the Linux kernel's Intel Bluetooth PCIe driver. An off-by-one boundary check error in the transmission interrupt handler allows an array index to exceed valid buffer limits. A local attacker could exploit this flaw to crash the system, resulting in a denial of service DoS, or...
JXL_Infotainment_CVE-2025-63895
JXLInfotainmentCVE-2025-63895 CVE-2025-63895 Attack Name 📂 Additional Details Afftected product Affected Components Bluetooth Classic version 5.0 Bluetooth firmware stack LMP implementation Infotainment Bluetooth service Attack Vector An attacker within Bluetooth range can exploit this issue by...
SUSE-SU-2026:4687-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-50645: EDAC/i10nm: fix refcount leak in pcigetdevwrapper bsc1254633. - CVE-2026-31663: xfrm: hold device only for the asynchronous decryption bsc1263133. -...
kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close
A flaw was found in the Bluetooth hcisync component of the Linux kernel. When the hcidevclosesync function is called during a device reset, the system may experience queuing timeouts. This occurs because the HCICMDDRAINWORKQUEUE flag is not properly set, which can lead to system instability or a...
MiracleLinux 9 : kernel-5.14.0-687.47.1.el9_8 (AXSA:2026-2048:99)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2048:99 advisory. kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset CVE-2025-68745 kernel: drm/xe:...
CVE-2026-98392
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: fix txhandle bounds off-by-one Valid indices into txq-urbd0s/tfds/bufs are 0..txq-count-1, so tfdindex == txq-count is already out of range. Change the guard in btintelpciemsixtxhandle from ' txq-count' to...
EUVD-2026-101041
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: fix txhandle bounds off-by-one Valid indices into txq-urbd0s/tfds/bufs are 0..txq-count-1, so tfdindex == txq-count is already out of range. Change the guard in btintelpciemsixtxhandle from ' txq-count' to...
CVE-2026-98392 Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: fix txhandle bounds off-by-one Valid indices into txq-urbd0s/tfds/bufs are 0..txq-count-1, so tfdindex == txq-count is already out of range. Change the guard in btintelpciemsixtxhandle from ' txq-count' to...
Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-8924-1)
The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8924-1 advisory. It was discovered that the timer stats implementation in the Linux kernel allowed the discovery of a real PID value while inside a PID namespace. A local...
CVE-2026-98392
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: fix txhandle bounds off-by-one Valid indices into txq-urbd0s/tfds/bufs are 0..txq-count-1, so tfdindex == txq-count is already out of range. Change the guard in btintelpciemsixtxhandle from ' txq-count' to...
Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-8923-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8923-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
Bluetooth Component DoS
The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
USN-8908-2: BlueZ regression
USN-8908-1 fixed vulnerabilities in BlueZ. Unfortunately, that update introduced a regression in the A2DP profile: cached remote stream endpoints were no longer loaded at startup, which could cause Bluetooth audio devices to fail to reconnect automatically or to fall back to low-quality audio...
CVE-2026-96844
Integer underflow wrap or wraparound in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network...
CVE-2026-87713
Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network...
CVE-2026-83868
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-83838
Integer underflow wrap or wraparound in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network...