4 matches found
AZL-104853 CVE-2026-97977 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Fix UAF of btusbdata by rxwork btusbclose and btusbflush cancel data-rxwork with the asynchronous canceldelayedwork, so if btusbrxwork is already running on another CPU it keeps running after the cancel returns...
CVE-2026-97977
The Linux kernel contains a Use-After-Free (UAF) vulnerability in the btusb Bluetooth driver. The issue occurs because btusb_close() and btusb_flush() use the asynchronous cancel_delayed_work() function; if btusb_rx_work() is already executing on another CPU, it continues running after the cancel...
EUVD-2026-86631
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Fix UAF of btusbdata by rxwork btusbclose and btusbflush cancel data-rxwork with the asynchronous canceldelayedwork, so if btusbrxwork is already running on another CPU it keeps running after the cancel returns...
CVE-2026-97977 Bluetooth: btusb: Fix UAF of btusb_data by rx_work
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Fix UAF of btusbdata by rxwork btusbclose and btusbflush cancel data-rxwork with the asynchronous canceldelayedwork, so if btusbrxwork is already running on another CPU it keeps running after the cancel returns...