https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T21:49:20.166614+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-3658 CVE-2021-3658 2026-10-01T21:49:20.216529+00:00

Affected: bluez

bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.

 https://vulnerability.circl.lu/vuln/usn-5155-1 USN-5155-1 — bluez vulnerabilities 2026-10-01T21:49:20.216627+00:00

Affected: Ubuntu:18.04:LTS: bluez, Ubuntu:20.04:LTS: bluez

It was discovered that BlueZ incorrectly handled the Discoverable status when a device is powered down. This could result in devices being powered up discoverable, contrary to expectations. This issue only affected Ubuntu 20.04 LTS, Ubuntu 21.04, and Ubuntu 21.10. (CVE-2021-3658)

It was discovered that BlueZ incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause BlueZ to consume resources, leading to a denial of service. (CVE-2021-41229)

It was discovered that the BlueZ gatt server incorrectly handled disconnects. A remote attacker could possibly use this issue to cause BlueZ to crash, leading to a denial of service. (CVE-2021-43400)