CVE-2025-40634

CVE-2025-40634 The TP-Link Archer AX50 router is vulnerable to a stack-based buffer overflow on its firmware version 1.0.14 Build 20240108 rel.426554555, leading to Remote Code Execution both in the LAN and in the WAN side. This vulnerability has the same root cause as CVE-2020-10881, found by th...

conn-burst

Connection Burst Identification This package identifies "bursting connections" which are considered to be connections which transfer a large amount of data quickly. Once a bursty connection is identified it is no longer watched for being bursty. When a bursty connection is identified, the event...

CLEANSTART-2026-DW44819 When Conn

CVE-2025-58189 affects multiple packages. When Conn. See references for individual vulnerability details...

CLEANSTART-2026-DC52804 When Conn

CVE-2025-58189 affects multiple packages. When Conn. See references for individual vulnerability details...

CLEANSTART-2026-CV59692 When Conn

CVE-2025-58189 affects multiple packages. When Conn. See references for individual vulnerability details...

PT-2026-123418

The Bluetooth host pre-allocates a bt conn object a "reservation" from the fixed acl conns pool for every connectable advertising set it starts, in le adv start add conn in subsys/bluetooth/host/adv.c. When an incoming peripheral connection completes, find pending connect in...

PT-2026-116955

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Bluetooth subsystem. The function hci enhanced setup sync operates on the request workqueue without holding the hci dev lock. During the CVSD...

PT-2026-116681

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where the hci conn module fails to correctly manage CIS Connected Isochronous Stream hold ownership during reuse. Specifically, the hci bind ci...

PT-2026-128642

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci conn: fix CIS hold ownership on reuse Commit 69997d50ec57 "Bluetooth: ISO: handle bound CIS cleanup via hci conn" made hci bind cis and hci connect cis return a connection with one hold for the ISO layer. hci bind...

PT-2026-128503

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci conn: Lock parent access during enhanced SCO setup Bluetooth: hci conn: Lock parent access during enhanced SCO setup hci enhanced setup sync runs on the request workqueue without the hci dev lock held by its caller...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: sof-common: Added a NULL check for the normallink string. It is not guaranteed that all entries of struct sofconnstream declare a normallink a non-SOF, direct link string. This applies to SoCs that only support SO...

PT-2026-115811

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in iso conn ready iso get sock returns the parent socket with a reference held, which is dropped by sock put once the child socket has been set up. The error path taken when iso sock alloc...

PT-2026-106686

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A slab-use-after-free issue exists in the IB/isert component of the Linux kernel. The isert send done function offloads completions for ISTATE SEND TASKMGTRSP, ISTATE SEND REJECT, and...

PT-2026-106622

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth ISO implementation where a parent socket leak occurs within the iso conn ready function. The iso get sock function returns the parent socket with a...

PT-2026-115824

In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred control PDU completions before releasing the connection isert send done hands ISTATE SEND TASKMGTRSP, ISTATE SEND REJECT and ISTATE SEND TEXTRSP completions off to isert comp wq and returns. The work...

django-database-conn-pool (>=1.1.0, <=1.1.1), django-learngual (>=0.39.0, <=0.895.0) +2 more potentially affected by CVE-2026-15307 via django (4.0.8)

django PYPI version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-database-conn-pool =1.1.0, =0.39.0, =0.11.21, =0.50.3 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

CLEANSTART-2026-YO61836 When Conn

Security vulnerability affects the cri-tools package. When Conn...

PT-2026-98732

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Reliable Datagram Sockets RDS implementation. The rds conn shutdown function attempts to quiesce transmit and receive-refill paths by checking if RDS IN XM...

PT-2026-98769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the l2cap ecred connect function within the Bluetooth L2CAP subsystem. The issue occurs because l2cap chan connect only counts deferred channels when...

PT-2026-98731

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Reliable Datagram Sockets RDS implementation. The rds conn shutdown function incorrectly handles the RDS CONN ERROR state during its final transition to RD...