https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T03:20:30.104976+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:2081 ALSA-2022:2081 — Low: bluez security update 2026-10-09T03:20:30.136214+00:00

Affected: AlmaLinux:8: bluez, AlmaLinux:8: bluez-cups, AlmaLinux:8: bluez-hid2hci, AlmaLinux:8: bluez-libs, AlmaLinux:8: bluez-libs-devel, AlmaLinux:8: bluez-obexd

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.

Security Fix(es):

* bluez: memory leak in the SDP protocol (CVE-2021-41229)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2022-06043 bdu:2022-06043 2026-10-09T03:20:30.136289+00:00 bdu:2022-06043 https://cve.radiocsirt.org/vuln/cnvd-2021-92546 cnvd-2021-92546 2026-10-09T03:20:30.136313+00:00 cnvd-2021-92546 https://cve.radiocsirt.org/vuln/euvd-2026-258778 EUVD-2026-258778 2026-10-09T03:20:30.136342+00:00 EUVD-2026-258778 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41229 fkie_cve-2021-41229 2026-10-09T03:20:30.136365+00:00

BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.

 https://cve.radiocsirt.org/vuln/gsd-2021-41229 gsd-2021-41229 2026-10-09T03:20:30.136389+00:00 gsd-2021-41229 https://cve.radiocsirt.org/vuln/oesa-2022-1763 OESA-2022-1763 — bluez security update 2026-10-09T03:20:30.136399+00:00

Affected: openEuler:20.03-LTS-SP1: bluez, openEuler:20.03-LTS-SP3: bluez, openEuler:22.03-LTS: bluez

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A. Security Fix(es): BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.(CVE-2021-41229)

 https://cve.radiocsirt.org/vuln/rhsa-2022:2081 RHSA-2022:2081 — Red Hat Security Advisory: bluez security update 2026-10-09T03:20:30.136426+00:00

bluez: memory leak in the SDP protocol

 https://cve.radiocsirt.org/vuln/suse-su-2023:3240-1 SUSE-SU-2023:3240-1 — Security update for bluez 2026-10-09T03:20:30.136443+00:00

Security update for bluez

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-41229 UBUNTU-CVE-2021-41229 2026-10-09T03:20:30.136458+00:00

Affected: Ubuntu:Pro:16.04:LTS: bluez, Ubuntu:18.04:LTS: bluez, Ubuntu:20.04:LTS: bluez, Ubuntu:22.04:LTS: bluez

BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1836 WID-SEC-W-2022-1836 — Red Hat Enterprise Linux (BlueZ): Schwachstelle ermöglicht Denial of Service 2026-10-09T03:20:30.136480+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in BlueZ ausnutzen, um einen Denial of Service Angriff durchzuführen.