Lucene search
+L

9 matches found

SUSE CVE
SUSE CVE
added 2026/07/25 3:59 p.m.9 views

SUSE CVE-2026-64405

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix null ptr deref in hciabortconn hciabortconn read hciskbeventhdev-sentcmd when a connection was pending, but hdev-sentcmd can be NULL while reqstatus is still HCIREQPEND, leading to a NULL pointer dereferen...

5.8AI score0.00173EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/07/25 8:50 a.m.11 views

EUVD-2026-48949

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix null ptr deref in hciabortconn hciabortconn read hciskbeventhdev-sentcmd when a connection was pending, but hdev-sentcmd can be NULL while reqstatus is still HCIREQPEND, leading to a NULL pointer dereferen...

5.8AI score0.00173EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2026/07/23 12:47 p.m.7 views

kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync

A flaw was found in the Linux kernel’s Bluetooth subsystem HCI. Specifically, in the function hciaclcreateconnsync and related path hcilecreateconnsync, a connection object in state BTOPEN that is still pending command submission may be freed prematurely, leading to a use-after-free condition. An...

8.8CVSS7.4AI score0.00263EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/01/14 12:13 a.m.6 views

kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync

A flaw was found in the Linux kernel’s Bluetooth subsystem HCI. Specifically, in the function hciaclcreateconnsync and related path hcilecreateconnsync, a connection object in state BTOPEN that is still pending command submission may be freed prematurely, leading to a use-after-free condition. An...

8.8CVSS5.7AI score0.00263EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/01/14 12:10 a.m.5 views

kernel: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync

A flaw was found in the Linux kernel’s Bluetooth subsystem HCI. Specifically, in the function hciaclcreateconnsync and related path hcilecreateconnsync, a connection object in state BTOPEN that is still pending command submission may be freed prematurely, leading to a use-after-free condition. An...

8.8CVSS5.7AI score0.00263EPSS
SaveExploits0References5
CVE
CVE
added 2025/10/15 7:56 a.m.39 views

CVE-2025-39982

CVE-2025-39982: Linux kernel Bluetooth subsystem use-after-free in hci_acl_create_conn_sync (and related paths like hci_le_create_conn_sync) has been fixed. The issue occurred when a connection in BT_OPEN state pending command submission could be freed, leading to a use-after-free on the connecti...

8.8CVSS6.2AI score0.00263EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/10/15 7:56 a.m.14 views

CVE-2025-39982 Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix UAF in hciaclcreateconnsync This fixes the following UFA in hciaclcreateconnsync where a connection still pending is command submission conn-state == BTOPEN maybe freed, also since this also can happen wi...

8.8CVSS0.00263EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/04/17 12:0 a.m.6 views

Honeywell Experion Server 安全漏洞

Honeywell Experion Server is a high-performance industrial control system server from Honeywell, primarily used in the Experion Process Knowledge System PKS platform. A security vulnerability exists in Honeywell Experion Server, which originates when the server receives an incorrectly formatted...

8.1CVSS7AI score0.00773EPSS
SaveExploits0References2
NVD
NVD
added 2022/01/14 8:15 p.m.28 views

CVE-2021-39659

In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privileges needed. User interaction is not needed f...

5.5CVSS0.00109EPSS
SaveExploits0References1
Rows per page
Query Builder