Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 15

Количество 15

ubuntu логотип

CVE-2026-46056

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_conn lookup and field access must be covered by hdev lock in hci_user_passkey_notify_evt() and hci_keypress_notify_evt(), otherwise the connection can be freed concurrently. Extend the hci_dev_lock critical section to cover all conn usage in both handlers. Keep the existing keypress notification behavior unchanged by routing the early exits through a common unlock path.

CVSS3: 8.8
EPSS: Низкий
redhat логотип

CVE-2026-46056

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_conn lookup and field access must be covered by hdev lock in hci_user_passkey_notify_evt() and hci_keypress_notify_evt(), otherwise the connection can be freed concurrently. Extend the hci_dev_lock critical section to cover all conn usage in both handlers. Keep the existing keypress notification behavior unchanged by routing the early exits through a common unlock path.

CVSS3: 7.1
EPSS: Низкий
nvd логотип

CVE-2026-46056

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_conn lookup and field access must be covered by hdev lock in hci_user_passkey_notify_evt() and hci_keypress_notify_evt(), otherwise the connection can be freed concurrently. Extend the hci_dev_lock critical section to cover all conn usage in both handlers. Keep the existing keypress notification behavior unchanged by routing the early exits through a common unlock path.

CVSS3: 8.8
EPSS: Низкий
msrc логотип

CVE-2026-46056

3 месяца назад

Bluetooth: hci_event: fix potential UAF in SSP passkey handlers

CVSS3: 7.1
EPSS: Низкий
debian логотип

CVE-2026-46056

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: B ...

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-v6c2-56h6-9pgq

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_conn lookup and field access must be covered by hdev lock in hci_user_passkey_notify_evt() and hci_keypress_notify_evt(), otherwise the connection can be freed concurrently. Extend the hci_dev_lock critical section to cover all conn usage in both handlers. Keep the existing keypress notification behavior unchanged by routing the early exits through a common unlock path.

CVSS3: 8.8
EPSS: Низкий
rocky логотип

RLSA-2026:26427

около 2 месяцев назад

Important: kernel security update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-26427

около 2 месяцев назад

ELSA-2026-26427: kernel security update (IMPORTANT)

EPSS: Низкий
rocky логотип

RLSA-2026:27288

около 2 месяцев назад

Important: kernel security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-27288

8 дней назад

ELSA-2026-27288: kernel security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
rocky логотип

RLSA-2026:27789

около 2 месяцев назад

Important: kernel security, bug fix, and enhancement update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-27789

около 2 месяцев назад

ELSA-2026-27789: kernel security, bug fix, and enhancement update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3166-1

22 дня назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:3130-1

24 дня назад

Security update for the Linux Kernel

EPSS: Низкий
oracle-oval логотип

ELSA-2026-50372

около 1 месяца назад

ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-46056

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_conn lookup and field access must be covered by hdev lock in hci_user_passkey_notify_evt() and hci_keypress_notify_evt(), otherwise the connection can be freed concurrently. Extend the hci_dev_lock critical section to cover all conn usage in both handlers. Keep the existing keypress notification behavior unchanged by routing the early exits through a common unlock path.

CVSS3: 8.8
0%
Низкий
3 месяца назад
redhat логотип
CVE-2026-46056

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_conn lookup and field access must be covered by hdev lock in hci_user_passkey_notify_evt() and hci_keypress_notify_evt(), otherwise the connection can be freed concurrently. Extend the hci_dev_lock critical section to cover all conn usage in both handlers. Keep the existing keypress notification behavior unchanged by routing the early exits through a common unlock path.

CVSS3: 7.1
0%
Низкий
3 месяца назад
nvd логотип
CVE-2026-46056

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_conn lookup and field access must be covered by hdev lock in hci_user_passkey_notify_evt() and hci_keypress_notify_evt(), otherwise the connection can be freed concurrently. Extend the hci_dev_lock critical section to cover all conn usage in both handlers. Keep the existing keypress notification behavior unchanged by routing the early exits through a common unlock path.

CVSS3: 8.8
0%
Низкий
3 месяца назад
msrc логотип
CVE-2026-46056

Bluetooth: hci_event: fix potential UAF in SSP passkey handlers

CVSS3: 7.1
0%
Низкий
3 месяца назад
debian логотип
CVE-2026-46056

In the Linux kernel, the following vulnerability has been resolved: B ...

CVSS3: 8.8
0%
Низкий
3 месяца назад
github логотип
GHSA-v6c2-56h6-9pgq

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers hci_conn lookup and field access must be covered by hdev lock in hci_user_passkey_notify_evt() and hci_keypress_notify_evt(), otherwise the connection can be freed concurrently. Extend the hci_dev_lock critical section to cover all conn usage in both handlers. Keep the existing keypress notification behavior unchanged by routing the early exits through a common unlock path.

CVSS3: 8.8
0%
Низкий
3 месяца назад
rocky логотип
RLSA-2026:26427

Important: kernel security update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-26427

ELSA-2026-26427: kernel security update (IMPORTANT)

около 2 месяцев назад
rocky логотип
RLSA-2026:27288

Important: kernel security, bug fix, and enhancement update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-27288

ELSA-2026-27288: kernel security, bug fix, and enhancement update (IMPORTANT)

8 дней назад
rocky логотип
RLSA-2026:27789

Important: kernel security, bug fix, and enhancement update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-27789

ELSA-2026-27789: kernel security, bug fix, and enhancement update (IMPORTANT)

около 2 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:3166-1

Security update for the Linux Kernel

22 дня назад
suse-cvrf логотип
SUSE-SU-2026:3130-1

Security update for the Linux Kernel

24 дня назад
oracle-oval логотип
ELSA-2026-50372

ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)

около 1 месяца назад

Уязвимостей на страницу