Bluetooth: L2CAP: Fix not validating setsockopt user input

...

nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies

...

PT-2025-46624

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free issue within the get netdev for sock function. This function is called during setsockopt, and the previous implementation using sk dst getsk-de...

Linux Distros Unpatched Vulnerability : CVE-2024-35964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not validating setsockopt user input Check user input length before...

Linux Distros Unpatched Vulnerability : CVE-2021-32606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel 5.11 through 5.12.2, isotpsetsockopt in net/can/isotp.c allows privilege escalation to root by leveraging a use-after-free. This does not...

Linux Distros Unpatched Vulnerability : CVE-2018-6555

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The irdasetsockopt function in net/irda/afirda.c and later in drivers/staging/irda/net/afirda.c in the Linux kernel before 4.17 allows local users to cause a...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: ax25: rcu protect dev-ax25ptr syzbot identified a lockdep issue 1. We should remove the ax25 RTNL dependency in ax25setsockopt. This should also fix various potential UAF issues in ax25. 1 WARNING: A circular locking dependenc...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: net/rose: integer overflows can occur when using rosesetsockopt with potentially excessively large arguments, along with additional values being applied to them. To mitigate this issue, perform the following actions as a minimum...

CVE-2005-0973

Unknown vulnerability in the setsockopt system call in Mac OS X 10.3.9 and earlier allows local users to cause a denial of service memory exhaustion via crafted arguments...

kernel: Bluetooth: SCO: Fix not validating setsockopt user input

This CVE pertains to a vulnerability in the Linux kernel's Bluetooth subsystem, specifically within the SCO Synchronous Connection-Oriented protocol. The issue arises from the scosocksetsockopt function, which copies data without properly validating the length of user input. This oversight can le...

kernel: Bluetooth: RFCOMM: Fix not validating setsockopt user input

This is a vulnerability in the Linux kernel's Bluetooth RFCOMM protocol. It occurs because the rfcommsocksetsockoptold function fails to properly validate the length of user-supplied data, leading to out-of-bounds memory reads. This flaw could result in system instability or crashes...

kernel: Bluetooth: hci_sock: Fix not validating setsockopt user input

A denial of service vulnerability was found in the Linux kernel. No input validation is performed in the Bluetooth hcisock function. This vulnerability could lead to a crash, resulting in the loss of system availability...

kernel: Bluetooth: ISO: Fix not validating setsockopt user input

CVE-2024-35964 is a vulnerability in the Linux kernel’s Bluetooth ISO implementation. It occurs because the setsockopt function does not properly validate the size of user-provided data before copying it into kernel memory. This flaw can lead to buffer overflows, potentially resulting in crashes ...

CVE-2024-57493

An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function...

CVE-2024-57493

An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function...

relibc 安全漏洞

relibc Redox C Library is an open source library for Redox OS. A security vulnerability exists in versions prior to relibc 98aa4ea5, which stems from the setsockopt function that can lead to a denial of service...

CVE-2024-57493

An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function...

CVE-2024-57493

An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function...

PT-2025-17335 · Redoxos · Redoxos

Name of the Vulnerable Software and Affected Versions: redoxOS relibc versions before commit 98aa4ea5 Description: The issue allows a local attacker to cause a denial of service via the setsockopt function. Recommendations: For versions before commit 98aa4ea5, consider disabling the setsockopt...

CVE-2024-57493

CVE-2024-57493 affects redoxOS relibc prior to commit 98aa4ea5. The vulnerability arises from an issue in the relibc setsockopt implementation that allows a local attacker to cause a denial of service. Impact is limited to availability degradation; no confidentiality or integrity impact is indica...