Lucene search
+L

97 matches found

OSV
OSV
•added 2023/04/11 9:15 p.m.•5 views

DEBIAN-CVE-2023-1989

A use-after-free flaw was found in btsdioremove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdioremove with an unfinished job may cause a race problem which leads to a UAF on hdev devices...

7CVSS6.2AI score0.00437EPSS
SaveExploits0References1
OSV
OSV
•added 2023/04/11 9:15 p.m.•12 views

UBUNTU-CVE-2023-1989

A use-after-free flaw was found in btsdioremove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdioremove with an unfinished job may cause a race problem which leads to a UAF on hdev devices...

7.1CVSS6.7AI score0.00437EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2023/04/11 5:59 p.m.•48 views

CVE-2023-1989

A use-after-free flaw was found in btsdioremove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdioremove with an unfinished job may cause a race problem which leads to a UAF on hdev devices. Mitigation This flaw can be mitigated by preventing the affected Generic Bluetooth SDIO...

7CVSS6.7AI score0.00437EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/04/11 12:00 a.m.•15 views

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in the Linux kernel, which stems from the fact that the use of an unfinished job call btsdioremove can lead to a contention iss...

7.1CVSS6.4AI score0.00437EPSS
SaveExploits0References17
Cvelist
Cvelist
•added 2023/04/11 12:00 a.m.•48 views

CVE-2023-1989 Kernel: use after free bug in btsdio_remove due to race condition

A use-after-free flaw was found in btsdioremove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdioremove with an unfinished job may cause a race problem which leads to a UAF on hdev devices...

7CVSS7.3AI score0.00437EPSS
SaveExploits0References8
Mend
Mend
•added 2023/04/11 12:00 a.m.•1 views

CVE-2023-1989

A use-after-free flaw was found in btsdioremove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdioremove with an unfinished job may cause a race problem which leads to a UAF on hdev devices...

7.3CVSS0.00437EPSS
SaveExploits0References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/11 12:00 a.m.•5 views

CVE-2023-1989: Use After Free

A use-after-free flaw was found in btsdioremove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdioremove with an unfinished job may cause a race problem which leads to a UAF on hdev devices...

7.1CVSS6.2AI score0.00437EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2022/11/14 12:00 a.m.•9 views

PT-2022-35190 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.1 Description: The issue is related to the Bluetooth functionality in the Linux Kernel. It involves the use of hdev-workqueue when queuing hdev-cmd,ncmd timer works. The actual impact and attack plausibilit...

7.2AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/11/14 12:00 a.m.•2 views

PT-2022-35114

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.3 Description The issue is related to the use of hci dev test and set flag in mgmt init hdev. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

5.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/09/14 12:00 a.m.•0 views

PT-2022-38020

Уязвимость функции mgmt init hdev модуля net/bluetooth/mgmt.c подсистемы Bluetooth ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и...

7.8CVSS0.00108EPSS
SaveExploits0References5
OSV
OSV
•added 2022/06/28 7:10 p.m.•17 views

GSD-2022-1003388 Bluetooth: use hdev lock for accept_list and reject_list in conn req

Bluetooth: use hdev lock for acceptlist and rejectlist in conn req This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2022/06/28 6:45 p.m.•17 views

GSD-2022-1003102 Bluetooth: use hdev lock for accept_list and reject_list in conn req

Bluetooth: use hdev lock for acceptlist and rejectlist in conn req This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

7.2AI score
SaveExploits0
OSV
OSV
•added 2022/06/28 6:16 p.m.•22 views

GSD-2022-1002762 Bluetooth: use hdev lock for accept_list and reject_list in conn req

Bluetooth: use hdev lock for acceptlist and rejectlist in conn req This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•0 views

PT-2022-31865

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns the use of hdev lock for accept list and reject list in connection requests over Bluetooth. The actual impact and attack plausibility have not yet been proven...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•0 views

PT-2022-31651

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.17 through 5.15.45 Description The issue concerns the use of hdev lock for accept list and reject list in connection requests over Bluetooth. It was introduced in version v3.17 and fixed in version v5.15.46. The actual...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•0 views

PT-2022-31365

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue concerns the use of hdev lock for accept list and reject list in connection requests over Bluetooth. The actual impact and attack plausibility have not yet been proven...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•0 views

PT-2022-31025

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns the use of hdev lock for accept list and reject list in connection requests over Bluetooth. It was introduced in version v3.17 and fixed in version v5.18.3. The actual impac...

5.7AI score
SaveExploits0References1
Rows per page
Query Builder