11 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007313)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007313 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free bugs caused by scosocktimeout When the sco connection is establishe...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988975)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988975 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix dangling scoconn and use-after-free in scosocktimeout Connecting the same socket...
SUSE-SU-2025:20450-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_2
This update for kernel-livepatch-MICRO-6-0-RTUpdate2 fixes the following issues: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inetcreate bsc1235231 - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing bsc1233708 - CVE-2024-50301:...
Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)
This update for the Linux Kernel 5.14.21-1505005562 fixes several issues. The following security issues were fixed: CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool bsc1225429. CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. CVE-2024-43861: Fix memor...
PT-2022-32034
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.146 through 5.4.197 Description The issue is related to a use-after-free in sco sock timeout, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...
PT-2022-32160
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a dangling sco conn and use-after-free in sco sock timeout. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-31018
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.18.3 Description The issue concerns a use-after-free in sco sock timeout, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendatio...
PT-2022-32272
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a dangling sco conn and use-after-free in sco sock timeout. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-32339
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue concerns a use-after-free in sco sock timeout, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations F...
PT-2022-31643
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a dangling sco conn and use-after-free in sco sock timeout. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...
PT-2025-8408
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel's Bluetooth implementation. This occurs when the same socket is connected twice consecutively in sco sock connect, leading to a race...