BIT-PYTHON-2026-3298 Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes

The method "sockrecvfrominto" of "asyncio.ProacterEventLoop" Windows only was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected...

ECHO-D919-26A7-2ED8

Bulletin has no description...

ECHO-3DE4-0D29-7632

Bulletin has no description...

ECHO-BC64-5C49-0F35

Bulletin has no description...

ECHO-49C7-4E0E-F2A6

Bulletin has no description...

ECHO-0E5E-7C8E-8329

Bulletin has no description...

ECHO-3CC9-F4C3-075B

Bulletin has no description...

ECHO-C41C-0D0A-92AD

Bulletin has no description...

kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold

A flaw was found in the Linux kernel's Bluetooth SCO Synchronous Connection-Oriented protocol implementation. The scorecvframe function fails to properly hold a reference to a socket after releasing a lock. This oversight allows a concurrent operation to free the socket while it is still being...

MINI-PWCF-687P-WFJ6

Bulletin has no description...

MINI-RC34-CRPH-X8V2

Bulletin has no description...

MINI-JQ46-2F8Q-VVH2

Bulletin has no description...

MINI-6GG2-C295-4G34

Bulletin has no description...

MINI-5J6X-P3XH-WQQV

Bulletin has no description...

MINI-36XG-HR5M-C398

Bulletin has no description...

MINI-JQ3W-PC4G-WXMH

Bulletin has no description...

MINI-FCCG-J5M7-R3R8

Bulletin has no description...

MINI-W43W-W3WP-5FJR

Bulletin has no description...

MINI-QCRQ-439G-XVX7

Bulletin has no description...

kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold

A flaw was found in the Linux kernel's Bluetooth SCO Synchronous Connection-Oriented protocol implementation. The scorecvframe function fails to properly hold a reference to a socket after releasing a lock. This oversight allows a concurrent operation to free the socket while it is still being...