https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 23:14:47 +0000 https://vulnerability.circl.lu/vuln/cve-2025-40301 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: hci_event: validate skb length for unknown CC opcode</p> <p>In hci_cmd_complete_evt(), if the command complete event has an unknown opcode, we assume the first byte of the remaining skb-&gt;data contains the return status. However, parameter data has previously been pulled in hci_event_func(), which may leave the skb empty. If so, using skb-&gt;data[0] for the return status uses un-init memory.</p> <p>The fix is to check skb-&gt;len before using skb-&gt;data.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Bluetooth: hci_event: validate skb length for unknown CC opcode</p> <p>In hci_cmd_complete_evt(), if the command complete event has an unknown opcode, we assume the first byte of the remaining skb-&gt;data contains the return status. However, parameter data has previously been pulled in hci_event_func(), which may leave the skb empty. If so, using skb-&gt;data[0] for the return status uses un-init memory.</p> <p>The fix is to check skb-&gt;len before using skb-&gt;data.</p> https://vulnerability.circl.lu/vuln/cve-2025-40301