https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:42:04 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-12365 bdu:2026-12365 https://cve.radiocsirt.org/vuln/bdu:2026-12365 https://cve.radiocsirt.org/vuln/bell-cve-2026-31497 <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:23: linux-lts, Alpaquita:25: linux-lts, Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-31497 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0519 certfr-2026-avi-0519 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0519 https://cve.radiocsirt.org/vuln/euvd-2026-315593 EUVD-2026-315593 https://cve.radiocsirt.org/vuln/euvd-2026-315593 https://cve.radiocsirt.org/vuln/fkie_cve-2026-31497 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: btusb: clamp SCO altsetting table indices</p> <p>btusb_work() maps the number of active SCO links to USB alternate settings through a three-entry lookup table when CVSD traffic uses transparent voice settings. The lookup currently indexes alts[] with data-&gt;sco_num - 1 without first constraining sco_num to the number of available table entries.</p> <p>While the table only defines alternate settings for up to three SCO links, data-&gt;sco_num comes from hci_conn_num() and is used directly. Cap the lookup to the last table entry before indexing it so the driver keeps selecting the highest supported alternate setting without reading past alts[].</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: btusb: clamp SCO altsetting table indices</p> <p>btusb_work() maps the number of active SCO links to USB alternate settings through a three-entry lookup table when CVSD traffic uses transparent voice settings. The lookup currently indexes alts[] with data-&gt;sco_num - 1 without first constraining sco_num to the number of available table entries.</p> <p>While the table only defines alternate settings for up to three SCO links, data-&gt;sco_num comes from hci_conn_num() and is used directly. Cap the lookup to the last table entry before indexing it so the driver keeps selecting the highest supported alternate setting without reading past alts[].</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-31497 https://cve.radiocsirt.org/vuln/ghsa-5324-g7qj-pjfx <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: btusb: clamp SCO altsetting table indices</p> <p>btusb_work() maps the number of active SCO links to USB alternate settings through a three-entry lookup table when CVSD traffic uses transparent voice settings. The lookup currently indexes alts[] with data-&gt;sco_num - 1 without first constraining sco_num to the number of available table entries.</p> <p>While the table only defines alternate settings for up to three SCO links, data-&gt;sco_num comes from hci_conn_num() and is used directly. Cap the lookup to the last table entry before indexing it so the driver keeps selecting the highest supported alternate setting without reading past alts[].</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: btusb: clamp SCO altsetting table indices</p> <p>btusb_work() maps the number of active SCO links to USB alternate settings through a three-entry lookup table when CVSD traffic uses transparent voice settings. The lookup currently indexes alts[] with data-&gt;sco_num - 1 without first constraining sco_num to the number of available table entries.</p> <p>While the table only defines alternate settings for up to three SCO links, data-&gt;sco_num comes from hci_conn_num() and is used directly. Cap the lookup to the last table entry before indexing it so the driver keeps selecting the highest supported alternate setting without reading past alts[].</p> https://cve.radiocsirt.org/vuln/ghsa-5324-g7qj-pjfx https://cve.radiocsirt.org/vuln/msrc_cve-2026-31497 msrc_CVE-2026-31497 https://cve.radiocsirt.org/vuln/msrc_cve-2026-31497 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21555-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:21555-1 https://cve.radiocsirt.org/vuln/suse-su-2026:23066-1 <p>Security update for the Linux Kernel</p> <p>Security update for the Linux Kernel</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23066-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-31497 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 179 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: clamp SCO altsetting table indices btusb_work() maps the number of active SCO links to USB alternate settings through a three-entry lookup table when CVSD traffic uses transparent voice settings. The lookup currently indexes alts[] with data-&gt;sco_num - 1 without first constraining sco_num to the number of available table entries. While the table only defines alternate settings for up to three SCO links, data-&gt;sco_num comes from hci_conn_num() and is used directly. Cap the lookup to the last table entry before indexing it so the driver keeps selecting the highest supported alternate setting without reading past alts[].</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 179 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: clamp SCO altsetting table indices btusb_work() maps the number of active SCO links to USB alternate settings through a three-entry lookup table when CVSD traffic uses transparent voice settings. The lookup currently indexes alts[] with data-&gt;sco_num - 1 without first constraining sco_num to the number of available table entries. While the table only defines alternate settings for up to three SCO links, data-&gt;sco_num comes from hci_conn_num() and is used directly. Cap the lookup to the last table entry before indexing it so the driver keeps selecting the highest supported alternate setting without reading past alts[].</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-31497 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1252 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen, andere nicht näher spezifizierte Auswirkungen zu verursachen und möglicherweise Code auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen, andere nicht näher spezifizierte Auswirkungen zu verursachen und möglicherweise Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1252