PT-2026-106576

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci codec: validate vendor codec count length The Read Local Supported Codecs parsers consume the variable-sized standard codec array before parsing the vendor codec count. Although the initial reply-size check include...

kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI component. A null pointer dereference occurs in the hcireadsupportedcodecs function because hcicmdsyncsk incorrectly returns a NULL value for unknown opcodes. A local attacker with low privileges could exploit this...

kernel: Bluetooth: hci_codec: Fix leaking content of local_codecs

A memory leak flaw was found in the Linux kernel’s Bluetooth functionality. This flaw allows a local user to crash the system...

DEBIAN-CVE-2023-52518

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicodec: Fix leaking content of localcodecs The following memory leak can be observed when the controller supports codecs which are stored in localcodecs list but the elements are never freed: unreferenced object...

UBUNTU-CVE-2023-52518

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcicodec: Fix leaking content of localcodecs The following memory leak can be observed when the controller supports codecs which are stored in localcodecs list but the elements are never freed: unreferenced object...