CVE-2021-25485

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Oct-2021 Release 1 allows attackers to write file as system UID via BT remote socket...

CVE-2021-34145

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMPmaxslot with an invalid Baseband packet type and LTADDRESS and LTADDR after completion of the LMP setup procedure, allowing attackers in radio range...

CVE-2021-34148

The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of LMPmaxslot with a greater ACL Length after completion of the LMP setup procedure, allowing attackers in radio range to trigger a denial of service...

CVE-2020-14930

An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp request, this token is transmitted not only to the registered phone number of the user account, but i...

CVE-2025-4589: Improper Neutralization of Input During Web Page Generation

The Bon Toolkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt-map' shortcode in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-22010: Improper Locking

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix soft lockup during bt pages loop Driver runs a for-loop when allocating bt pages and mapping them with buffer pages. When a large buffer e.g. MR over 100GB is being allocated, it may require a considerable loop coun...

PT-2025-15398

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A soft lockup issue has been resolved in the Linux kernel. The problem occurs when the driver allocates a large buffer, such as a Memory Region MR over 100GB, which requires a...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from too many loops when allocating bt pages, which could lead to a soft lockup...

The vulnerability of the Linux operating system’s Bluetooth kernel component, which allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s Bluetooth kernel component is related to improper error handling in the function btexit in net/bluetooth/afbluetooth.c. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-53025 Integer Overflow or Wraparound in BT Controller

Transient DOS can occur while processing UCI command...

CVE-2024-53025 Integer Overflow or Wraparound in BT Controller

Transient DOS can occur while processing UCI command...

Story About Medical Device Security

Ben Rothke relates a story about me working with a medical device firm back when I was with BT. I don't remember the story at all, or who the company was. But it sounds about right...

CVE-2024-6135

BT:Classic: Multiple missing buf length checks...

Telecom Giant BT Group Hit by Black Basta Ransomware

BT Group, a major telecommunications firm, has been hit by a ransomware attack from the Black Basta group. The attack targeted the company's Conferencing division, leading to server shutdowns and potential data theft...

PT-2024-23691

Name of the Vulnerable Software and Affected Versions Open Robotics Robotic Operating System 2 ROS2 navigation2 versions ROS2-humble Description The issue allows a local attacker to execute arbitrary code via the error-thrown mechanism in nav2 bt navigator. This is due to an Insecure Permissions...

PT-2024-35686

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the Bluetooth component, specifically the btmtk module, where the position to initialize the iso data ancho...

CVE-2024-50078

Summary of CVE-2024-50078 (Linux kernel) : The Bluetooth subsystem may fail to call iso_exit() when a module is unloaded after iso_init() has been invoked, leaving the proto registered with proto_register() in an invalid state. This can trigger kernel list corruption bugs and an eventual kernel o...

PT-2024-33909

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: The issue arises when bt debugfs is not created successfully due to either CONFIG DEBUG FS or CONFIG DEBUG FS ALLOW ALL being unset. This leads to iso init returning early without...

kernel security update

5.14.0-427.40.14.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

PT-2024-36913

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to the Bluetooth L2CAP protocol in the Linux kernel. Specifically, in the l2cap sock create function, a dangling pointer to the sk object may be left attached to the sock...