Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: ISO: Fixed UAF in isosocktimeout The conn-sk might have been unlinked/freed while waiting for isoconnlock. Therefore, this check determines whether conn-sk is still valid by verifying that it is part of isosklist...

PT-2026-82966

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.0-rc4 Description A race condition exists in the Bluetooth SCO component. The function sco sock timeout runs asynchronously and acquires a socket lock. If a socket is closing while the timer is active, the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007313)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007313 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free bugs caused by scosocktimeout When the sco connection is establishe...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988975)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988975 advisory. In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix dangling scoconn and use-after-free in scosocktimeout Connecting the same socket...

EUVD-2024-53336

Malicious code in bioql PyPI...

SUSE-SU-2025:20450-1 Security update for kernel-livepatch-MICRO-6-0-RT_Update_2

This update for kernel-livepatch-MICRO-6-0-RTUpdate2 fixes the following issues: - CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inetcreate bsc1235231 - CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing bsc1233708 - CVE-2024-50301:...

Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5)

This update for the Linux Kernel 5.14.21-1505005562 fixes several issues. The following security issues were fixed: CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool bsc1225429. CVE-2024-36904: tcp: Use refcountincnotzero in tcptwskunique bsc1225733. CVE-2024-43861: Fix memor...

UBUNTU-CVE-2024-50124

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix UAF on isosocktimeout conn-sk maybe have been unlinked/freed while waiting for isoconnlock so this checks if the conn-sk is still valid by checking if it part of isosklist...

PT-2024-8527

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.61 Description The issue is related to a use-after-free vulnerability in the iso sock timeout function in the Linux kernel's Bluetooth implementation. This vulnerability may allow an attacker to impact the...

PT-2022-32034

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.146 through 5.4.197 Description The issue is related to a use-after-free in sco sock timeout, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2022-32160

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a dangling sco conn and use-after-free in sco sock timeout. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31018

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.18.3 Description The issue concerns a use-after-free in sco sock timeout, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-32272

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a dangling sco conn and use-after-free in sco sock timeout. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31643

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a dangling sco conn and use-after-free in sco sock timeout. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-32339

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue concerns a use-after-free in sco sock timeout, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven. Recommendations F...

PT-2025-8408

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel's Bluetooth implementation. This occurs when the same socket is connected twice consecutively in sco sock connect, leading to a race...