2 matches found
EUVD-2026-45748
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix possible crash on l2capecredconnrsp If dcid is received for an already-assigned destination CID the spec requires that both channels to be discarded, but calling l2capchandel may invalidate the tmp cursor...
PT-2026-61292
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix possible crash on l2cap ecred conn rsp If dcid is received for an already-assigned destination CID the spec requires that both channels to be discarded, but calling l2cap chan del may invalidate the tmp curs...