CVE-2026-63946

CVE-2026-63946 describes a Linux kernel Bluetooth ISO UAF in iso_recv_frame. The bug occurs when iso_recv_frame reads conn->sk under iso_conn_lock but releases the lock before using sk, with no reference held, allowing a concurrent iso_sock_kill() to free sk and cause a use-after-free on sk-&g...

Linux Distros Unpatched Vulnerability : CVE-2026-10658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btisorecv in subsys/bluetooth/host/iso.c pulled the ISO SDU header 4 bytes or, when the timestamp flag is set, the timestamped SDU header 8 bytes from the inbou...

CVE-2026-31607

In the Linux kernel, the following vulnerability has been resolved: usbip: validate numberofpackets in usbippackretsubmit When a USB/IP client receives a RETSUBMIT response, usbippackretsubmit unconditionally overwrites urb-numberofpackets from the network PDU. This value is subsequently used as...