Skip to content
OpenAdvisories
Medium WID-SEC-2026-4097 2 CVEs

Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Published Oct 21, 2026 · Updated Nov 3, 2026 · Revision 2 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

Product

Der Kernel stellt den Kern des Linux Betriebssystems dar.

Vulnerabilities 2

  • High 8.8

    Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service…

  • High 7.8

    bpf: Infer zext_dst based on static register liveness analysis

    In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zext_dst based on static register liveness analysis As reported in the thread [1], the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for co…

Revision history

  1. #2

    Neue Updates von SUSE aufgenommen

  2. #1

    Initiale Fassung

References