53 matches found
The vulnerabilities of the functions l2cap_disconnect_req() and l2cap_disconnect_rsp() in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities of the functions l2capdisconnectreq and l2capdisconnectrsp in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem are related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting these vulnerabilities coul...
The vulnerability of the hci_add_adv_monitor() function in the net/bluetooth/hci_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the hciaddadvmonitor function in the net/bluetooth/hcicore.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
SUSE CVE-2026-45834
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2capsockstatechangecb Add the same NULL guard already present in l2capsockresumecb and l2capsockreadycb...
The vulnerability of the hci_create_cis_sync() function in the net/bluetooth/hci_conn.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to cause a service failure.
The vulnerability of the hcicreatecissync function in the net/bluetooth/hciconn.c module of the Linux kernel’s Bluetooth subsystem is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-23299
A flaw was found in the Linux kernel's Bluetooth subsystem. When transmit TX timestamping is enabled, socket kernel buffers SKBs can accumulate in an error queue. If user applications fail to read these timestamps or if the Bluetooth controller is unexpectedly removed, these SKBs are not properly...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003886)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003886 advisory. A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2capconndel of the file net/bluetooth/l2capcore.c of the...
ROS-20260114-7326
A vulnerability in the hcicblist function of the Linux kernel Bluetooth driver is related to synchronization errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
CVE-2023-54164 Bluetooth: ISO: fix iso_conn related locking and validity issues
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix isoconn related locking and validity issues sk-skstate indicates whether isopisk-conn is valid. Operations that check/update skstate and access conn should hold locksock, otherwise they can race. The order of...
Linux Distros Unpatched Vulnerability : CVE-2023-54120
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: Fix race condition in hidpsessionthread There is a potential race condition in hidpsessionthread that may lead to use-after-free. For instance, the...
EUVD-2022-55084
Malicious code in bioql PyPI...
EUVD-2025-12860
Malicious code in bioql PyPI...
PT-2025-34402 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Bluetooth component of the Linux kernel related to btusb. A potential NULL pointer dereference can occur due to an improper handling of kmalloc allocation failures...
Linux Distros Unpatched Vulnerability : CVE-2023-53018
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix memory leaks When hcicmdsyncqueue failed in hcileterminatebig or...
Linux Distros Unpatched Vulnerability : CVE-2024-26888
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: Fix memory leak Fix leaking buffer allocated to send...
Linux Distros Unpatched Vulnerability : CVE-2021-32399
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/bluetooth/hcirequest.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller. CVE-2021-32399 Note that Nessus relies on...
CVE-2025-38473
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix null-ptr-deref in l2capsockresumecb syzbot reported null-ptr-deref in l2capsockresumecb. 0 l2capsockresumecb has a similar problem that was fixed by commit 1bff51ea59a9 "Bluetooth: fix use-after-free error in...
CVE-2025-38304
CVE-2025-38304 : In the Linux kernel, a NULL pointer dereference in Bluetooth eir_get_service_data (len parameter can be NULL) is fixed. The vulnerability affects the Bluetooth EIR handling path and is rated with LOCAL attack vector and HIGH availability impact, implying potential kernel crash or...
CVE-2022-50166
CVE-2022-50166 affects the Linux kernel Bluetooth HCI subsystem. When the HCI work queue is drained, a delayed command could still be queued to the drained workqueue, triggering a timeout in hci_cmd_timeout and a kernel warning. The root cause is the draining of the command/event/data processing ...