Количество 25
Количество 25
GHSA-r6qv-6h22-hpj4
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() l2cap_ecred_data_rcv() reads the SDU length field from skb->data using get_unaligned_le16() without first verifying that skb contains at least L2CAP_SDULEN_SIZE (2) bytes. When skb->len is less than 2, this reads past the valid data in the skb. The ERTM reassembly path correctly calls pskb_may_pull() before reading the SDU length (l2cap_reassemble_sdu, L2CAP_SAR_START case). Apply the same validation to the Enhanced Credit Based Flow Control data path.
CVE-2026-31512
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() l2cap_ecred_data_rcv() reads the SDU length field from skb->data using get_unaligned_le16() without first verifying that skb contains at least L2CAP_SDULEN_SIZE (2) bytes. When skb->len is less than 2, this reads past the valid data in the skb. The ERTM reassembly path correctly calls pskb_may_pull() before reading the SDU length (l2cap_reassemble_sdu, L2CAP_SAR_START case). Apply the same validation to the Enhanced Credit Based Flow Control data path.
CVE-2026-31512
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() l2cap_ecred_data_rcv() reads the SDU length field from skb->data using get_unaligned_le16() without first verifying that skb contains at least L2CAP_SDULEN_SIZE (2) bytes. When skb->len is less than 2, this reads past the valid data in the skb. The ERTM reassembly path correctly calls pskb_may_pull() before reading the SDU length (l2cap_reassemble_sdu, L2CAP_SAR_START case). Apply the same validation to the Enhanced Credit Based Flow Control data path.
CVE-2026-31512
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() l2cap_ecred_data_rcv() reads the SDU length field from skb->data using get_unaligned_le16() without first verifying that skb contains at least L2CAP_SDULEN_SIZE (2) bytes. When skb->len is less than 2, this reads past the valid data in the skb. The ERTM reassembly path correctly calls pskb_may_pull() before reading the SDU length (l2cap_reassemble_sdu, L2CAP_SAR_START case). Apply the same validation to the Enhanced Credit Based Flow Control data path.
CVE-2026-31512
Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()
CVE-2026-31512
In the Linux kernel, the following vulnerability has been resolved: B ...
ROS-20261007-80-0042
Уязвимость kernel-lt
ROS-20261007-73-0041
Уязвимость kernel-lt
SUSE-SU-2026:2202-1
Security update for the Linux Kernel
SUSE-SU-2026:2215-1
Security update for the Linux Kernel
SUSE-SU-2026:2195-1
Security update for the Linux Kernel
SUSE-SU-2026:2068-1
Security update for the Linux Kernel
SUSE-SU-2026:2217-1
Security update for the Linux Kernel
SUSE-SU-2026:2238-1
Security update for the Linux Kernel
ALT-PU-2026-6805
ALT-PU-2026-6805: package `kernel-image-un-def` update to version 6.1.168-alt1
ALT-PU-2026-7359
ALT-PU-2026-7359: package `kernel-image-std-def` update to version 5.10.253-alt1
ALT-PU-2026-7109
ALT-PU-2026-7109: package `kernel-image-rt` update to version 5.10.254-alt1.rt150
ALT-PU-2026-6793
ALT-PU-2026-6793: package `kernel-image-6.18` update to version 6.18.22-alt1
ALT-PU-2026-7584
ALT-PU-2026-7584: package `kernel-image-rpi-un` update to version 6.12.86-alt1
ELSA-2026-50372
ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-r6qv-6h22-hpj4 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() l2cap_ecred_data_rcv() reads the SDU length field from skb->data using get_unaligned_le16() without first verifying that skb contains at least L2CAP_SDULEN_SIZE (2) bytes. When skb->len is less than 2, this reads past the valid data in the skb. The ERTM reassembly path correctly calls pskb_may_pull() before reading the SDU length (l2cap_reassemble_sdu, L2CAP_SAR_START case). Apply the same validation to the Enhanced Credit Based Flow Control data path. | CVSS3: 5.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-31512 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() l2cap_ecred_data_rcv() reads the SDU length field from skb->data using get_unaligned_le16() without first verifying that skb contains at least L2CAP_SDULEN_SIZE (2) bytes. When skb->len is less than 2, this reads past the valid data in the skb. The ERTM reassembly path correctly calls pskb_may_pull() before reading the SDU length (l2cap_reassemble_sdu, L2CAP_SAR_START case). Apply the same validation to the Enhanced Credit Based Flow Control data path. | CVSS3: 5.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-31512 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() l2cap_ecred_data_rcv() reads the SDU length field from skb->data using get_unaligned_le16() without first verifying that skb contains at least L2CAP_SDULEN_SIZE (2) bytes. When skb->len is less than 2, this reads past the valid data in the skb. The ERTM reassembly path correctly calls pskb_may_pull() before reading the SDU length (l2cap_reassemble_sdu, L2CAP_SAR_START case). Apply the same validation to the Enhanced Credit Based Flow Control data path. | CVSS3: 5.7 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-31512 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() l2cap_ecred_data_rcv() reads the SDU length field from skb->data using get_unaligned_le16() without first verifying that skb contains at least L2CAP_SDULEN_SIZE (2) bytes. When skb->len is less than 2, this reads past the valid data in the skb. The ERTM reassembly path correctly calls pskb_may_pull() before reading the SDU length (l2cap_reassemble_sdu, L2CAP_SAR_START case). Apply the same validation to the Enhanced Credit Based Flow Control data path. | CVSS3: 5.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-31512 Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() | CVSS3: 5.5 | 0% Низкий | 6 месяцев назад |
| CVE-2026-31512 In the Linux kernel, the following vulnerability has been resolved: B ... | CVSS3: 5.5 | 0% Низкий | 6 месяцев назад |
 | ROS-20261007-80-0042 Уязвимость kernel-lt | CVSS3: 5.5 | 0% Низкий | 20 дней назад |
| ROS-20261007-73-0041 Уязвимость kernel-lt | CVSS3: 5.5 | 0% Низкий | 20 дней назад |
 | SUSE-SU-2026:2202-1 Security update for the Linux Kernel | 5 месяцев назад | ||
| SUSE-SU-2026:2215-1 Security update for the Linux Kernel | 5 месяцев назад | ||
| SUSE-SU-2026:2195-1 Security update for the Linux Kernel | 4 месяца назад | ||
| SUSE-SU-2026:2068-1 Security update for the Linux Kernel | 5 месяцев назад | ||
| SUSE-SU-2026:2217-1 Security update for the Linux Kernel | 5 месяцев назад | ||
| SUSE-SU-2026:2238-1 Security update for the Linux Kernel | 4 месяца назад | ||
| ALT-PU-2026-6805 ALT-PU-2026-6805: package `kernel-image-un-def` update to version 6.1.168-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
| ALT-PU-2026-7359 ALT-PU-2026-7359: package `kernel-image-std-def` update to version 5.10.253-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
| ALT-PU-2026-7109 ALT-PU-2026-7109: package `kernel-image-rt` update to version 5.10.254-alt1.rt150 | CVSS3: 9.8 | 6 месяцев назад | |
| ALT-PU-2026-6793 ALT-PU-2026-6793: package `kernel-image-6.18` update to version 6.18.22-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
| ALT-PU-2026-7584 ALT-PU-2026-7584: package `kernel-image-rpi-un` update to version 6.12.86-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
| ELSA-2026-50372 ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 4 месяца назад |
Уязвимостей на страницу