CVE-2026-64433

CVE-2026-64433 is a Use-After-Free in the Linux kernel's Bluetooth MGMT subsystem (net/bluetooth/mgmt.c). The function add_device_complete() calls hci_conn_params_lookup() and reads params->flags without holding hci_dev_lock, allowing a concurrent MGMT_OP_REMOVE_DEVICE to free the underlying o...

Forced relock in VotiumStrategy withdrawal causes denial of service if Convex locking contract is shutdown

Lines of code Vulnerability details Summary The VotiumStrategy withdrawal process involves relocking CVX tokens, which can potentially lead to a denial of service and loss of user funds if the underlying vlCVX contract is shutdown. Impact When withdrawals are executed in VotiumStrategy, the...