CVE-2026-68389

The CVE-2026-68389 entry pertains to the Linux kernel Bluetooth HCI QCA path. The vulnerability arises when qca_controller_memdump() processes a sequence-zero packet with a zero dump size: it frees the local qca_memdump object and returns without clearing qca->qca_memdump or undoing the memdum...

EUVD-2026-55575

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciqca: Clear memdump state on invalid dump size qcacontrollermemdump allocates qca-qcamemdump before processing the first dump packet. For a sequence-zero packet it then disables IBS, marks memdump collection active,...