Lucene search
+L

8 matches found

SUSE CVE
SUSE CVE
•added 2026/09/19 1:40 a.m.•10 views

SUSE CVE-2026-90089

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Validate the FW dump header length nxpprocessfwdump pulls the ACL header off the frame and then reads seqnum and buflen from a struct nxpfwdumphdr placed at skb-data, without checking that the ACL payload is...

7.1CVSS5.8AI score0.00331EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/18 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-90089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btnxpuart: Validate the FW dump header length nxpprocessfwdump pulls the ACL header off the frame and then reads seqnum and buflen from a struct...

7.1CVSS5.9AI score0.00331EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/17 5:17 p.m.•9 views

DEBIAN-CVE-2026-90089

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Validate the FW dump header length nxpprocessfwdump pulls the ACL header off the frame and then reads seqnum and buflen from a struct nxpfwdumphdr placed at skb-data, without checking that the ACL payload is...

7.1CVSS5.9AI score0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/17 4:06 p.m.•33 views

CVE-2026-90089 Bluetooth: btnxpuart: Validate the FW dump header length

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Validate the FW dump header length nxpprocessfwdump pulls the ACL header off the frame and then reads seqnum and buflen from a struct nxpfwdumphdr placed at skb-data, without checking that the ACL payload is...

7.1CVSS0.00331EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/17 4:06 p.m.•10 views

CVE-2026-90089 Bluetooth: btnxpuart: Validate the FW dump header length

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Validate the FW dump header length nxpprocessfwdump pulls the ACL header off the frame and then reads seqnum and buflen from a struct nxpfwdumphdr placed at skb-data, without checking that the ACL payload is...

7.1CVSS5.8AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/09/17 4:06 p.m.•12 views

EUVD-2026-81950

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Validate the FW dump header length nxpprocessfwdump pulls the ACL header off the frame and then reads seqnum and buflen from a struct nxpfwdumphdr placed at skb-data, without checking that the ACL payload is...

5.8AI score0.00331EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/17 4:06 p.m.•25 views

CVE-2026-90089

This Linux kernel vulnerability affects the btnxpuart Bluetooth driver (NXP UART-based controllers). The function nxp_process_fw_dump() reads seq_num and buf_len from an 8-byte struct nxp_fw_dump_hdr at the start of the ACL payload without verifying that the payload is at least 8 bytes long. Sinc...

7.1CVSS5.8AI score0.00331EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•1 views

CVE-2026-90089: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Validate the FW dump header length nxpprocessfwdump pulls the ACL header off the frame and then reads seqnum and buflen from a struct nxpfwdumphdr placed at skb-data, without checking that the ACL payload is...

7.1CVSS5.8AI score0.00331EPSS
SaveExploits0References1
Rows per page
Query Builder