<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 30 Sep 2026 06:36:00 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-56654 — Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2024-56654</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating&lt;/p&gt;
&lt;p&gt;The usage of rcu_read_(un)lock while inside list_for_each_entry_rcu is
not safe since for the most part entries fetched this way shall be
treated as rcu_dereference:&lt;/p&gt;
&lt;p&gt;Note that the value returned by rcu_dereference() is valid
	only within the enclosing RCU read-side critical section [1]_.
	For example, the following is **not** legal::&lt;/p&gt;
&lt;p&gt;rcu_read_lock();
		p = rcu_dereference(head.next);
		rcu_read_unlock();
		x = p-&amp;gt;address;	/* BUG!!! */
		rcu_read_lock();
		y = p-&amp;gt;data;	/* BUG!!! */
		rcu_read_unlock();&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating&lt;/p&gt;
&lt;p&gt;The usage of rcu_read_(un)lock while inside list_for_each_entry_rcu is
not safe since for the most part entries fetched this way shall be
treated as rcu_dereference:&lt;/p&gt;
&lt;p&gt;Note that the value returned by rcu_dereference() is valid
	only within the enclosing RCU read-side critical section [1]_.
	For example, the following is **not** legal::&lt;/p&gt;
&lt;p&gt;rcu_read_lock();
		p = rcu_dereference(head.next);
		rcu_read_unlock();
		x = p-&amp;gt;address;	/* BUG!!! */
		rcu_read_lock();
		y = p-&amp;gt;data;	/* BUG!!! */
		rcu_read_unlock();&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2024-56654</guid>
    </item>
  </channel>
</rss>
