CVE-2026-93247

The Linux kernel contains a NULL pointer dereference vulnerability within the Bluetooth management subsystem. The issue arises because the uuid_count member of struct discovery_state is accessed and modified without proper locking, creating a race condition during hci_update_passive_scan_sync. If...

EUVD-2026-86257

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix 'hdev-discovery.uuids' NULL dereference 'uuidcount' member of struct 'discoverystate' is assigned and read without any locks, so there is a chance of situation when uuidcount != 0, but uuids is NULL and there...