6 matches found
CVE-2026-98633
The Linux kernel contains a memory leak vulnerability in the Bluetooth btnxpuart component within the nxp_process_fw_dump() function. When CONFIG_DEV_COREDUMP is disabled, the hci_devcd_append() function returns -EOPNOTSUPP without freeing its skb argument , resulting in a leaked cloned skb. This...
CVE-2026-98633 Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix skb leak in nxpprocessfwdump When CONFIGDEVCOREDUMP=n, hcidevcdappend returns -EOPNOTSUPP without freeing its skb argument. This leaks the cloned skb and also prevents nxpsetindreset from being called to...
EUVD-2026-103547
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix skb leak in nxpprocessfwdump When CONFIGDEVCOREDUMP=n, hcidevcdappend returns -EOPNOTSUPP without freeing its skb argument. This leaks the cloned skb and also prevents nxpsetindreset from being called to...
Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35856)
The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35856 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix...
CVE-2024-35856
A double-free vulnerability was found in the Linux kernel's MediaTek Bluetooth USB driver btusb. This issue occurs when the same socket buffer skb is freed twice during a coredump operation, potentially leading to memory corruption or system instability. Mitigation Mitigation for this issue is...
CVE-2024-35856 Bluetooth: btusb: mediatek: Fix double free of skb in coredump
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix double free of skb in coredump hcidevcdappend would free the skb on error so the caller don't have to free it again otherwise it would cause the double free of skb. Reported-by : Dan Carpenter...