The vulnerability of the btusb_mtk_claim_iso_intf() function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth kernel driver allows a hacker to cause a service failure.

The vulnerability of the btusbmtkclaimisointf function in the drivers/bluetooth/btusb.c module of the Linux Bluetooth device driver relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-43069: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcill: Fix firmware leak on error path Smatch reports: drivers/bluetooth/hcill.c:587 downloadfirmware warn: 'fw' from requestfirmware not released on lines: 544. In downloadfirmware, if requestfirmware succeeds but the...

CVE-2025-40308: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bcsp: receive data only if registered Currently, bcsprecv can be called even when the BCSP protocol has not been registered. This leads to a NULL pointer dereference, as shown in the following stack trace: KASAN:...

CVE-2025-37792: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Prevent potential NULL dereference The btrtlinitialize function checks that rtlloadfile either had an error or it loaded a zero length file. However, if it loaded a zero length file then the error code is not se...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A denial of service vulnerability exists in Linux kernel version 6.2, which originates from a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO in hciuartttyioctl in...

CVE-2023-31083: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in drivers/bluetooth/hcildisc.c in the Linux kernel 6.2. In hciuartttyioctl, there is a race condition between HCIUARTSETPROTO and HCIUARTGETPROTO. HCIUARTPROTOSET is set before hu-proto is set. A NULL pointer dereference may occur...

PT-2023-2679

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.2 Description The issue is related to a race condition in the hci uart tty ioctl function between HCIUARTSETPROTO and HCIUARTGETPROTO commands in the drivers/bluetooth/hci ldisc.c module. This can lead to a NULL pointer...

CVE-2022-26878: Missing Release of Memory after Effective Lifetime

drivers/bluetooth/virtiobt.c in the Linux kernel before 5.16.3 has a memory leak socket buffers have memory allocated but not freed...

CVE-2019-15917: Use After Free

An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hciuartregisterdev fails in hciuartsetproto in drivers/bluetooth/hcildisc.c...