https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:29:48 +0000 https://vulnerability.circl.lu/vuln/cve-2026-46056 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: hci_event: fix potential UAF in SSP passkey handlers</p> <p>hci_conn lookup and field access must be covered by hdev lock in hci_user_passkey_notify_evt() and hci_keypress_notify_evt(), otherwise the connection can be freed concurrently.</p> <p>Extend the hci_dev_lock critical section to cover all conn usage in both handlers.</p> <p>Keep the existing keypress notification behavior unchanged by routing the early exits through a common unlock path.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: hci_event: fix potential UAF in SSP passkey handlers</p> <p>hci_conn lookup and field access must be covered by hdev lock in hci_user_passkey_notify_evt() and hci_keypress_notify_evt(), otherwise the connection can be freed concurrently.</p> <p>Extend the hci_dev_lock critical section to cover all conn usage in both handlers.</p> <p>Keep the existing keypress notification behavior unchanged by routing the early exits through a common unlock path.</p> https://vulnerability.circl.lu/vuln/cve-2026-46056