CVE-2024-56531

CVE-2024-56531 affects the Linux kernel ALSA caiaq driver. The bug arises because the USB disconnect callback called snd_card_free(), which waits for all fds to close, potentially delaying release and causing upper-layer USB ioctls to block, risking a soft lockup. The fix replaces snd_card_free()...

CVE-2024-56531 ALSA: caiaq: Use snd_card_free_when_closed() at disconnection

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Use sndcardfreewhenclosed at disconnection The USB disconnect callback is supposed to be short and not too-long waiting. OTOH, the current code uses sndcardfree at disconnection, but this waits for the close of all...

bluez: double free in gatttool client disconnect callback handler in src/shared/att.c could lead to DoS or RCE

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

ALPINE-CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

UBUNTU-CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

CVE-2020-27153

In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event...

CVE-2019-19525

A use-after-free flaw was found in the ieee802154 network subsystem in the Linux kernel. A malicious USB device could cause the exploit when a disconnect callback is accessing the hardware-descriptor private data after having it freed by the atusbdisconnect driver. Mitigation Mitigation for this...