Lucene search
+L

12 matches found

AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•8 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: validate LE Set CIG Parameters response The Command Complete dispatch only validates the fixed part of the LE Set CIG Parameters response. After that part is extracted from the skb, the hcicclesetcigparams...

6.3AI score0.00173EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/09/04 4:18 p.m.•15 views

AZL-99654 CVE-2026-80763 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: validate LE Set CIG Parameters response The Command Complete dispatch validates only the fixed part of the LE Set CIG Parameters response. After that part is pulled from the skb, hcicclesetcigparams trusts...

5.9AI score0.00173EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/04 4:18 p.m.•18 views

CVE-2026-80763

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: validate LE Set CIG Parameters response The Command Complete dispatch validates only the fixed part of the LE Set CIG Parameters response. After that part is pulled from the skb, hcicclesetcigparams trusts...

0.00173EPSS
SaveExploits0References7
Debian CVE
Debian CVE
•added 2026/09/04 3:12 p.m.•25 views

CVE-2026-80763

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: validate LE Set CIG Parameters response The Command Complete dispatch validates only the fixed part of the LE Set CIG Parameters response. After that part is pulled from the skb, hcicclesetcigparams trusts...

6.2AI score0.00173EPSS
SaveExploits0
EUVD
EUVD
•added 2026/09/04 3:12 p.m.•17 views

EUVD-2026-71406

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: validate LE Set CIG Parameters response The Command Complete dispatch validates only the fixed part of the LE Set CIG Parameters response. After that part is pulled from the skb, hcicclesetcigparams trusts...

5.9AI score0.00173EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/09/04 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-80763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hcievent: validate LE Set CIG Parameters response The Command Complete dispatch validates only the fixed part of the LE Set CIG Parameters response...

6AI score0.00173EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/04 12:00 a.m.•7 views

CVE-2026-80763: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: validate LE Set CIG Parameters response The Command Complete dispatch validates only the fixed part of the LE Set CIG Parameters response. After that part is pulled from the skb, hcicclesetcigparams trusts...

6AI score0.00173EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•7 views

PT-2026-91360

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci event: validate LE Set CIG Parameters response The Command Complete dispatch validates only the fixed part of the LE Set CIG Parameters response. After that part is pulled from the skb, hci cc le set cig params...

6AI score0.00173EPSS
SaveExploits0References2
CNVD
CNVD
•added 2026/05/11 12:00 a.m.•44 views

Linux kernel set_cig_params_sync function memory misreference vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A memory misreference vulnerability exists in the Linux kernel. The vulnerability stems from the setcigparamssync function in Bluetooth hciconn not locking hciconn, which can b...

7.8CVSS6AI score0.001EPSS
SaveExploits0
NVD
NVD
•added 2026/05/01 3:16 p.m.•25 views

CVE-2026-43019

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix potential UAF in setcigparamssync hciconn lookup and field access must be covered by hdev lock in setcigparamssync, otherwise it's possible it is freed concurrently. Take hdev lock to prevent hciconn from...

7.8CVSS0.001EPSS
SaveExploits0References5
CVE
CVE
•added 2026/05/01 2:15 p.m.•108 views

CVE-2026-43019

The CVE-2026-43019 issue affects the Linux kernel Bluetooth HCI path, where hci_conn lookups and field access in set_cig_params_sync were not properly protected by the hdev lock, allowing a use-after-free when an hci_conn could be freed concurrently. The documented fix is to take the hdev lock to...

7.8CVSS6.2AI score0.001EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/05/01 2:15 p.m.•58 views

CVE-2026-43019 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: fix potential UAF in setcigparamssync hciconn lookup and field access must be covered by hdev lock in setcigparamssync, otherwise it's possible it is freed concurrently. Take hdev lock to prevent hciconn from...

7.8CVSS0.001EPSS
SaveExploits0References5
Rows per page
Query Builder