UBUNTU-CVE-2026-68391

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: hold reference for hciconn in mgmtpendingcmds Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF. Use of hciconn in hcisync callbacks also needs to hold refcount to avoi...

UBUNTU-CVE-2026-68394

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: revalidate LOADCONNPARAM queued update MGMTOPLOADCONNPARAM queues connupdatesync when a single parameter update changes an existing LE central connection. The queued work currently stores a borrowed hciconnparams...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: MGMT: Fixed possible UAFs This attempt to fix possible UAFs is due to the fact that the struct mgmtpending is freed while it is still being processed, as seen in the following trace. To address this issue,...

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-2971)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : USB: core: Limit the length of unkillable synchronous timeoutsCVE-2026-43428 usb: typec: ucsi: validate connector number in...

PT-2026-55794

Name of the Vulnerable Software and Affected Versions cve-search affected versions not specified Description An unauthenticated improper input validation issue exists in the 'POST /fetch cve data' endpoint. A remote attacker can manipulate request parameters that control the MongoDB collection,...

ROS-20260702-73-0009

The vulnerability of the ksmbdtreeconnlookup function in the fs/ksmbd/mgmt/treeconnect.c module of the SMB-server subsystem of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-53255

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate advertising TLV before type checks tlvdataisvalid reads each advertising data field length from datai, then inspects datai + 1 for managed EIR types before checking that the current field still fits insi...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: trivy-operator, gitlab-rails-ce-fips, kube-mgmt-fips, eksctl, kube-mgmt, k3s, kubescape-operator-fips, docker-fips, skaffold-fips, chartmuseum-fips, crossplane, teleport, helm-push, jfrog-cli, chaos-mesh-fips, kgateway, gitlab-rails-ce, kaniko-fips, linkerd2,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: trivy-operator, gitlab-rails-ce-fips, kube-mgmt-fips, eksctl, kube-mgmt, k3s, kubescape-operator-fips, docker-fips, skaffold-fips, chartmuseum-fips, crossplane, teleport, helm-push, jfrog-cli, chaos-mesh-fips, kgateway, gitlab-rails-ce, kaniko-fips, linkerd2,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: trivy-operator, gitlab-rails-ce-fips, kube-mgmt-fips, eksctl, kube-mgmt, k3s, kubescape-operator-fips, docker-fips, skaffold-fips, chartmuseum-fips, crossplane, teleport, helm-push, jfrog-cli, chaos-mesh-fips, kgateway, gitlab-rails-ce, kaniko-fips, linkerd2,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: trivy-operator, gitlab-rails-ce-fips, kube-mgmt-fips, eksctl, kube-mgmt, k3s, kubescape-operator-fips, docker-fips, skaffold-fips, chartmuseum-fips, crossplane, teleport, helm-push, jfrog-cli, chaos-mesh-fips, kgateway, gitlab-rails-ce, kaniko-fips, linkerd2,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: trivy-operator, gitlab-rails-ce-fips, kube-mgmt-fips, eksctl, kube-mgmt, k3s, kubescape-operator-fips, docker-fips, skaffold-fips, chartmuseum-fips, crossplane, teleport, helm-push, jfrog-cli, chaos-mesh-fips, kgateway, gitlab-rails-ce, kaniko-fips, linkerd2,...

RockyLinux 9 : kernel (RLSA-2026:21556)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:21556 advisory. kernel: proc: use the same treatment to check proclseek as ones for procreaditer et.al CVE-2025-38653 kernel: ima: don't clear IMADIGSIG flag when setti...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: vpvdpa: fixed the crash that occurs when the vpvdpa device is unplugged suddenly. When the vpvdpa device is unplugged, it triggers a kernel panic. The root cause is that vdpamgmtdevunregister will access modern devices, leadin...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fixed a dangling pointer in mgmtaddadvpatternsmonitorcomplete. This fix addresses the issue where, when status != -ECANCELED, mgmtpendingvalid was executed; otherwise, mgmtpendingfreecmd would free the memory, bu...

kernel: Bluetooth: MGMT: Fix possible UAFs

A flaw was found in the Linux kernel’s Bluetooth management subsystem net/bluetooth/mgmt.c. The mgmtpending structure may be freed while still being processed, or remain on the pending command list, which allows a use-after-free or double-free scenario. An attacker with local access to the system...

CVE-2026-31511

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmtaddadvpatternsmonitorcomplete This fixes the condition checking so mgmtpendingvalid is executed whenever status != -ECANCELED otherwise calling mgmtpendingfreecmd would kfreecmd withou...

CVE-2026-31511

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmtaddadvpatternsmonitorcomplete This fixes the condition checking so mgmtpendingvalid is executed whenever status != -ECANCELED otherwise calling mgmtpendingfreecmd would kfreecmd withou...

CVE-2026-31511 Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmtaddadvpatternsmonitorcomplete This fixes the condition checking so mgmtpendingvalid is executed whenever status != -ECANCELED otherwise calling mgmtpendingfreecmd would kfreecmd withou...