Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 24

Количество 24

ubuntu логотип

CVE-2026-23146

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work hci_uart_set_proto() sets HCI_UART_PROTO_INIT before calling hci_uart_register_dev(), which calls proto->open() to initialize hu->priv. However, if a TTY write wakeup occurs during this window, hci_uart_tx_wakeup() may schedule write_work before hu->priv is initialized, leading to a NULL pointer dereference in hci_uart_write_work() when proto->dequeue() accesses hu->priv. The race condition is: CPU0 CPU1 ---- ---- hci_uart_set_proto() set_bit(HCI_UART_PROTO_INIT) hci_uart_register_dev() tty write wakeup hci_uart_tty_wakeup() hci_uart_tx_wakeup() schedule_work(&hu->write_work) proto->open(hu) // initializes hu->priv hci_uart_write_work() hci_uart_dequeue() proto->dequeue(hu) // accesses hu->priv (NULL!) Fix this by moving set_bit(HCI_UART_PROTO_INIT) after proto->open() succeeds, ensuring hu->priv ...

CVSS3: 5.5
EPSS: Низкий
redhat логотип

CVE-2026-23146

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work hci_uart_set_proto() sets HCI_UART_PROTO_INIT before calling hci_uart_register_dev(), which calls proto->open() to initialize hu->priv. However, if a TTY write wakeup occurs during this window, hci_uart_tx_wakeup() may schedule write_work before hu->priv is initialized, leading to a NULL pointer dereference in hci_uart_write_work() when proto->dequeue() accesses hu->priv. The race condition is: CPU0 CPU1 ---- ---- hci_uart_set_proto() set_bit(HCI_UART_PROTO_INIT) hci_uart_register_dev() tty write wakeup hci_uart_tty_wakeup() hci_uart_tx_wakeup() schedule_work(&hu->write_work) proto->open(hu) // initializes hu->priv hci_uart_write_work() hci_uart_dequeue() proto->dequeue(hu) // accesses hu->priv (NULL!) Fix this by moving set_bit(HCI_UART_PROTO_INIT) after proto->open() succeeds, ensuring hu->priv ...

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2026-23146

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work hci_uart_set_proto() sets HCI_UART_PROTO_INIT before calling hci_uart_register_dev(), which calls proto->open() to initialize hu->priv. However, if a TTY write wakeup occurs during this window, hci_uart_tx_wakeup() may schedule write_work before hu->priv is initialized, leading to a NULL pointer dereference in hci_uart_write_work() when proto->dequeue() accesses hu->priv. The race condition is: CPU0 CPU1 ---- ---- hci_uart_set_proto() set_bit(HCI_UART_PROTO_INIT) hci_uart_register_dev() tty write wakeup hci_uart_tty_wakeup() hci_uart_tx_wakeup() schedule_work(&hu->write_work) proto->open(hu) // initializes hu->priv

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2026-23146

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: B ...

CVSS3: 5.5
EPSS: Низкий
github логотип

GHSA-hcr8-x92w-q652

9 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work hci_uart_set_proto() sets HCI_UART_PROTO_INIT before calling hci_uart_register_dev(), which calls proto->open() to initialize hu->priv. However, if a TTY write wakeup occurs during this window, hci_uart_tx_wakeup() may schedule write_work before hu->priv is initialized, leading to a NULL pointer dereference in hci_uart_write_work() when proto->dequeue() accesses hu->priv. The race condition is: CPU0 CPU1 ---- ---- hci_uart_set_proto() set_bit(HCI_UART_PROTO_INIT) hci_uart_register_dev() tty write wakeup hci_uart_tty_wakeup() hci_uart_tx_wakeup() schedule_work(&hu->write_work) proto->open(hu) // initializes hu->pr...

CVSS3: 5.5
EPSS: Низкий
fstec логотип

BDU:2026-11590

10 месяцев назад

Уязвимость ядра операционной системы Linux, связанная с ошибками разыменования указателя, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
EPSS: Низкий
redos логотип

ROS-20261006-80-0262

около 1 месяца назад

Уязвимость kernel-lt

CVSS3: 5.5
EPSS: Низкий
redos логотип

ROS-20261006-73-0261

около 1 месяца назад

Уязвимость kernel-lt

CVSS3: 5.5
EPSS: Низкий
oracle-oval логотип

ELSA-2026-50232

7 месяцев назад

ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
altlinux логотип

ALT-PU-2026-3821

9 месяцев назад

ALT-PU-2026-3821: package `kernel-image-rt` update to version 5.10.250-alt1.rt145

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-2587

8 месяцев назад

ALT-PU-2026-2587: package `kernel-image-std-def` update to version 5.10.250-alt1

CVSS3: 9.8
EPSS: Низкий
oracle-oval логотип

ELSA-2026-50145

8 месяцев назад

ELSA-2026-50145: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2026-50160

8 месяцев назад

ELSA-2026-50160: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:0962-1

8 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:1081-1

8 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2026-5135

8 месяцев назад

ALT-PU-2026-5135: package `kernel-image-6.18` update to version 6.18.20-alt1

CVSS3: 9.8
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2026:20416-1

8 месяцев назад

Security update for the Linux Kernel

EPSS: Низкий
altlinux логотип

ALT-PU-2026-3309

8 месяцев назад

ALT-PU-2026-3309: package `kernel-image-rt` update to version 6.12.74-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-3243

8 месяцев назад

ALT-PU-2026-3243: package `kernel-image-6.12` update to version 6.12.74-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-3750

8 месяцев назад

ALT-PU-2026-3750: package `kernel-image-un-def` update to version 6.1.163-alt1

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-23146

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work hci_uart_set_proto() sets HCI_UART_PROTO_INIT before calling hci_uart_register_dev(), which calls proto->open() to initialize hu->priv. However, if a TTY write wakeup occurs during this window, hci_uart_tx_wakeup() may schedule write_work before hu->priv is initialized, leading to a NULL pointer dereference in hci_uart_write_work() when proto->dequeue() accesses hu->priv. The race condition is: CPU0 CPU1 ---- ---- hci_uart_set_proto() set_bit(HCI_UART_PROTO_INIT) hci_uart_register_dev() tty write wakeup hci_uart_tty_wakeup() hci_uart_tx_wakeup() schedule_work(&hu->write_work) proto->open(hu) // initializes hu->priv hci_uart_write_work() hci_uart_dequeue() proto->dequeue(hu) // accesses hu->priv (NULL!) Fix this by moving set_bit(HCI_UART_PROTO_INIT) after proto->open() succeeds, ensuring hu->priv ...

CVSS3: 5.5
0%
Низкий
9 месяцев назад
redhat логотип
CVE-2026-23146

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work hci_uart_set_proto() sets HCI_UART_PROTO_INIT before calling hci_uart_register_dev(), which calls proto->open() to initialize hu->priv. However, if a TTY write wakeup occurs during this window, hci_uart_tx_wakeup() may schedule write_work before hu->priv is initialized, leading to a NULL pointer dereference in hci_uart_write_work() when proto->dequeue() accesses hu->priv. The race condition is: CPU0 CPU1 ---- ---- hci_uart_set_proto() set_bit(HCI_UART_PROTO_INIT) hci_uart_register_dev() tty write wakeup hci_uart_tty_wakeup() hci_uart_tx_wakeup() schedule_work(&hu->write_work) proto->open(hu) // initializes hu->priv hci_uart_write_work() hci_uart_dequeue() proto->dequeue(hu) // accesses hu->priv (NULL!) Fix this by moving set_bit(HCI_UART_PROTO_INIT) after proto->open() succeeds, ensuring hu->priv ...

CVSS3: 5.3
0%
Низкий
9 месяцев назад
nvd логотип
CVE-2026-23146

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work hci_uart_set_proto() sets HCI_UART_PROTO_INIT before calling hci_uart_register_dev(), which calls proto->open() to initialize hu->priv. However, if a TTY write wakeup occurs during this window, hci_uart_tx_wakeup() may schedule write_work before hu->priv is initialized, leading to a NULL pointer dereference in hci_uart_write_work() when proto->dequeue() accesses hu->priv. The race condition is: CPU0 CPU1 ---- ---- hci_uart_set_proto() set_bit(HCI_UART_PROTO_INIT) hci_uart_register_dev() tty write wakeup hci_uart_tty_wakeup() hci_uart_tx_wakeup() schedule_work(&hu->write_work) proto->open(hu) // initializes hu->priv

CVSS3: 5.5
0%
Низкий
9 месяцев назад
debian логотип
CVE-2026-23146

In the Linux kernel, the following vulnerability has been resolved: B ...

CVSS3: 5.5
0%
Низкий
9 месяцев назад
github логотип
GHSA-hcr8-x92w-q652

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work hci_uart_set_proto() sets HCI_UART_PROTO_INIT before calling hci_uart_register_dev(), which calls proto->open() to initialize hu->priv. However, if a TTY write wakeup occurs during this window, hci_uart_tx_wakeup() may schedule write_work before hu->priv is initialized, leading to a NULL pointer dereference in hci_uart_write_work() when proto->dequeue() accesses hu->priv. The race condition is: CPU0 CPU1 ---- ---- hci_uart_set_proto() set_bit(HCI_UART_PROTO_INIT) hci_uart_register_dev() tty write wakeup hci_uart_tty_wakeup() hci_uart_tx_wakeup() schedule_work(&hu->write_work) proto->open(hu) // initializes hu->pr...

CVSS3: 5.5
0%
Низкий
9 месяцев назад
fstec логотип
BDU:2026-11590

Уязвимость ядра операционной системы Linux, связанная с ошибками разыменования указателя, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 5.5
0%
Низкий
10 месяцев назад
redos логотип
ROS-20261006-80-0262

Уязвимость kernel-lt

CVSS3: 5.5
0%
Низкий
около 1 месяца назад
redos логотип
ROS-20261006-73-0261

Уязвимость kernel-lt

CVSS3: 5.5
0%
Низкий
около 1 месяца назад
oracle-oval логотип
ELSA-2026-50232

ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT)

7 месяцев назад
altlinux логотип
ALT-PU-2026-3821

ALT-PU-2026-3821: package `kernel-image-rt` update to version 5.10.250-alt1.rt145

CVSS3: 9.8
9 месяцев назад
altlinux логотип
ALT-PU-2026-2587

ALT-PU-2026-2587: package `kernel-image-std-def` update to version 5.10.250-alt1

CVSS3: 9.8
8 месяцев назад
oracle-oval логотип
ELSA-2026-50145

ELSA-2026-50145: Unbreakable Enterprise kernel security update (IMPORTANT)

8 месяцев назад
oracle-oval логотип
ELSA-2026-50160

ELSA-2026-50160: Unbreakable Enterprise kernel security update (IMPORTANT)

8 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:0962-1

Security update for the Linux Kernel

8 месяцев назад
suse-cvrf логотип
SUSE-SU-2026:1081-1

Security update for the Linux Kernel

8 месяцев назад
altlinux логотип
ALT-PU-2026-5135

ALT-PU-2026-5135: package `kernel-image-6.18` update to version 6.18.20-alt1

CVSS3: 9.8
8 месяцев назад
suse-cvrf логотип
openSUSE-SU-2026:20416-1

Security update for the Linux Kernel

8 месяцев назад
altlinux логотип
ALT-PU-2026-3309

ALT-PU-2026-3309: package `kernel-image-rt` update to version 6.12.74-alt1

CVSS3: 9.8
8 месяцев назад
altlinux логотип
ALT-PU-2026-3243

ALT-PU-2026-3243: package `kernel-image-6.12` update to version 6.12.74-alt1

CVSS3: 9.8
8 месяцев назад
altlinux логотип
ALT-PU-2026-3750

ALT-PU-2026-3750: package `kernel-image-un-def` update to version 6.1.163-alt1

CVSS3: 9.8
8 месяцев назад

Уязвимостей на страницу