CVE-2026-80760

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: reject HCICMDSYNC paramslen above 255 mgmthcicmdsync checks that the message length agrees with paramslen but puts no upper bound on it. paramslen is le16 while the parameter length in the HCI command header is a...

CVE-2026-80760

CVE-2026-80760 affects the Linux kernel Bluetooth MGMT subsystem. The function mgmt_hci_cmd_sync() validates that the message length matches params_len but fails to enforce an upper bound. Since params_len is a 16-bit value while the HCI command header plen field is 8-bit (max 255), a value of 25...

SUSE CVE-2022-39176

BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate paramslen...