CVE-2026-19939

The AVDTP signalling layer arms a 6-second command timeout AVDTPTIMEOUT in avdtpsendcmd whenever the local device issues an AVDTP request. Every response handler in subsys/bluetooth/host/classic/avdtp.c cancels session-timeoutwork before clearing the pending request, but btavdtpl2capdisconnected...

CVE-2026-19939

The AVDTP signalling layer arms a 6-second command timeout AVDTPTIMEOUT in avdtpsendcmd whenever the local device issues an AVDTP request. Every response handler in subsys/bluetooth/host/classic/avdtp.c cancels session-timeoutwork before clearing the pending request, but btavdtpl2capdisconnected...

EUVD-2026-84013

The Intel SEDI IPM inter-processor mailbox driver in drivers/ipm/ipmsedi.c handles an inbound message interrupt in ipmeventdispose. It read the peer-written doorbell register, extracted the payload length with IPCHEADERGETLENGTH, and passed that length straight to sediipcreadmsg to copy the messa...

CVE-2026-17051: Out-of-bounds Write

The Intel SEDI IPM inter-processor mailbox driver in drivers/ipm/ipmsedi.c handles an inbound message interrupt in ipmeventdispose. It read the peer-written doorbell register, extracted the payload length with IPCHEADERGETLENGTH, and passed that length straight to sediipcreadmsg to copy the messa...

PT-2026-96156

Name of the Vulnerable Software and Affected Versions Intel SEDI IPM affected versions not specified Description The Intel SEDI IPM driver contains an out-of-bounds write issue in the ipm event dispose function within drivers/ipm/ipm sedi.c. The driver processes inbound message interrupts by...

CVE-2006-3728: Undefined Security Weakness

Unspecified vulnerability in the kernel in Solaris 10 with patch 118822-29 118844-29 on x86 and without patch 118833-11 118855-08 allows remote authenticated users to cause a denial of service via unspecified vectors that lead to "kernel data structure corruption" that can trigger a system panic,...