sweyntooth_bluetooth_low_energy_attacks

SweynTooth - إطلاق الفوضى عبر البلوتوث منخفض الطاقة هذا المستودع هو جزء من نتائج بحث منمجموعة أبحاث ASSET. يكشف SweynTooth عن عائلة من 18 ثغرة أمنية عبر مجموعات تطوير البرمجيات SDKs المختلفة للبلوتوث منخفض الطاقة BLE لستة من كبار موردي الأنظمة على الرقاقة SoC. وتكشف هذه الثغرات عن عيوب في تنفيذات...

CVE-2026-80739

CVE-2026-80739 affects the Linux kernel 's mlx5_core driver (Mellanox/NVIDIA network hardware), specifically the TC (Traffic Control) offload path in net/mlx5e. When __mlx5e_add_fdb_flow() fails for a peer flow , the cleanup path mlx5e_tc_del_flow() acquires the ESW devcom lock unconditionally wh...

EUVD-2026-70343

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

CVE-2026-80739 net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock In case mlx5eaddfdbflow fails in lower levels, the flow is deleted via mlx5etcdelflow, and mlx5etcdelflow is acquiring ESW devcom lock without condition. In...

CVE-2026-78662

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

CVE-2026-56855

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

CVE-2026-78662 Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

CVE-2026-78662

CVE-2026-78662 affects the golang.org/x/crypto/ssh library. A channel registered in the mux's chanList was not marked as established until fully set up. A malicious peer could flood the channel's incomingRequests, deadlocking the entire connection (DoS). The fix introduces an atomic established s...

CVE-2026-56855 Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

GO-2026-6355 Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

GO-2026-6354 Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

CVE-2026-36957

CVE-2026-36957: رفض الخدمة عبر فيضان HTTP على خادم الويب Boa معرف CVE: CVE-2026-36957 التاريخ: 2026-04-29 المكتشف: Kirubel Solomne البائع: شركة Shenzhen Dibit Network Equipment Co., Ltd. المنتج: راوتر Dbit إصدار البرنامج الثابت: V1.0.0 CWE: CWE-400 - استهلاك غير متحكم فيه للموارد الوصف البرنامج...

CVE-2026-80687

A flaw was found in the Linux kernel's iommufd/viommu component. An error in the iommufdvdeviceallocioctl function's error handling path can lead to a lock being held indefinitely. This can cause a deadlock, preventing further virtual device vDEVICE operations and resulting in a Denial of Service...

CVE-2026-80666

A flaw was found in the Linux kernel's Bluetooth Synchronous Connection-Oriented SCO component. A race condition exists in the scosocktimeout function. When a Bluetooth SCO socket is closing while its timer is active, the system attempts to acquire the same lock twice, leading to a deadlock. This...

CVE-2026-80659

A flaw was found in the Linux kernel's vub300 driver. When the vub300cmndworkthread function holds a command mutex and a command response times out, the device reset path attempts to re-acquire the same mutex recursively. This recursive locking can lead to a deadlock, causing a Denial of Service...

CVE-2026-80660

A flaw was found in the Linux kernel's hwmon occ component. This vulnerability occurs when occactivefalse or occshutdown attempt to unregister sysfs devices while holding the occ-lock. During this process, sysfs callbacks can re-enter the OCC update path and try to acquire the occ-lock again,...

CVE-2026-80720

A flaw was found in the iomap component of the Linux kernel. The iomapsplitioend function can cause a deadlock when it attempts to split bios that originate from iomapioendbioset and the bioset is exhausted. This can lead to a system hang, resulting in a Denial of Service DoS for affected systems...

Linux Distros Unpatched Vulnerability : CVE-2026-80660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: occ unregister sysfs devices outside occ lock occactivefalse and occshutdown unregister sysfs-backed devices while occ-lock is held. hwmondeviceunregiste...

Linux Distros Unpatched Vulnerability : CVE-2026-80687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommufd/viommu: Release the igroup lock on the vdevicesize error path iommufdvdeviceallocioctl takes idev-igroup-lock, then validates the driver's vdevicesize...

Linux Distros Unpatched Vulnerability : CVE-2026-80659

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: vub300: defer reset until cmdmutex is unlocked vub300cmndworkthread holds cmdmutex while it sends a command and waits for the command response. If the...