PT-2026-116819

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth RFCOMM implementation where the rfcomm recv frame function fails to properly validate the length of frames with an extended 2-byte length field EA=0. Whe...

PT-2026-97983

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth RFCOMM component where the rfcomm recv frame function casts skb-data to struct rfcomm hdr and dereferences hdr-addr and hdr-ctrl without first validating...

PT-2026-104971

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in rfcomm recv frame rfcomm recv frame casts skb-data to struct rfcomm hdr and dereferences hdr-addr and hdr-ctrl without validating skb-len first. A truncated frame with skb-len less than t...