[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-21969":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":100,"related":101,"reserved_at":9,"published_at":118,"modified_at":119,"state":120,"summary":121,"references_raw":130,"kevs":149,"epss":150,"epss_history":153,"metrics":426,"affected":434},"CVE-2025-21969","In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd\n\nAfter the hci sync command releases l2cap_conn, the hci receive data work\nqueue references the released l2cap_conn when sending to the upper layer.\nAdd hci dev lock to the hci receive data work queue to synchronize the two.\n\n[1]\nBUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x187/0x8d0 net/bluetooth/l2cap_core.c:954\nRead of size 8 at addr ffff8880271a4000 by task kworker/u9:2/5837\n\nCPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:2 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: hci1 hci_rx_work\nCall Trace:\n \u003CTASK>\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n l2cap_build_cmd net/bluetooth/l2cap_core.c:2964 [inline]\n l2cap_send_cmd+0x187/0x8d0 net/bluetooth/l2cap_core.c:954\n l2cap_sig_send_rej net/bluetooth/l2cap_core.c:5502 [inline]\n l2cap_sig_channel net/bluetooth/l2cap_core.c:5538 [inline]\n l2cap_recv_frame+0x221f/0x10db0 net/bluetooth/l2cap_core.c:6817\n hci_acldata_packet net/bluetooth/hci_core.c:3797 [inline]\n hci_rx_work+0x508/0xdb0 net/bluetooth/hci_core.c:4040\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \u003C/TASK>\n\nAllocated by task 5837:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __kmalloc_cache_noprof+0x243/0x390 mm/slub.c:4329\n kmalloc_noprof include/linux/slab.h:901 [inline]\n kzalloc_noprof include/linux/slab.h:1037 [inline]\n l2cap_conn_add+0xa9/0x8e0 net/bluetooth/l2cap_core.c:6860\n l2cap_connect_cfm+0x115/0x1090 net/bluetooth/l2cap_core.c:7239\n hci_connect_cfm include/net/bluetooth/hci_core.h:2057 [inline]\n hci_remote_features_evt+0x68e/0xac0 net/bluetooth/hci_event.c:3726\n hci_event_func net/bluetooth/hci_event.c:7473 [inline]\n hci_event_packet+0xac2/0x1540 net/bluetooth/hci_event.c:7525\n hci_rx_work+0x3f3/0xdb0 net/bluetooth/hci_core.c:4035\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\nFreed by task 54:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582\n poison_slab_object mm/kasan/common.c:247 [inline]\n __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264\n kasan_slab_free include/linux/kasan.h:233 [inline]\n slab_free_hook mm/slub.c:2353 [inline]\n slab_free mm/slub.c:4613 [inline]\n kfree+0x196/0x430 mm/slub.c:4761\n l2cap_connect_cfm+0xcc/0x1090 net/bluetooth/l2cap_core.c:7235\n hci_connect_cfm include/net/bluetooth/hci_core.h:2057 [inline]\n hci_conn_failed+0x287/0x400 net/bluetooth/hci_conn.c:1266\n hci_abort_conn_sync+0x56c/0x11f0 net/bluetooth/hci_sync.c:5603\n hci_cmd_sync_work+0x22b/0x400 net/bluetooth/hci_sync.c:332\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entr\n---truncated---",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98],{"_key":25},"SUSE-SU-2025:01919-1",{"_key":27},"SUSE-SU-2025:01951-1",{"_key":29},"SUSE-SU-2025:01967-1",{"_key":31},"SUSE-SU-2025:01983-1",{"_key":33},"SUSE-SU-2025:03613-1",{"_key":35},"SUSE-SU-2025:03626-1",{"_key":37},"SUSE-SU-2025:1293-1",{"_key":39},"SUSE-SU-2025:01707-1",{"_key":41},"SUSE-SU-2025:01964-1",{"_key":43},"RHSA-2025:9079",{"_key":45},"SUSE-SU-2025:20192-1",{"_key":47},"SUSE-SU-2025:20206-1",{"_key":49},"SUSE-SU-2025:20270-1",{"_key":51},"SUSE-SU-2025:20283-1",{"_key":53},"SUSE-SU-2025:01614-1",{"_key":55},"MGASA-2025-0142",{"_key":57},"MGASA-2025-0146",{"_key":59},"UBUNTU-CVE-2025-21969",{"_key":61},"DEBIAN-CVE-2025-21969",{"_key":63},"RHSA-2025:9080",{"_key":65},"USN-7605-1",{"_key":67},"USN-7605-2",{"_key":69},"USN-7606-1",{"_key":71},"USN-7628-1",{"_key":73},"USN-7764-1",{"_key":75},"USN-7764-2",{"_key":77},"USN-7765-1",{"_key":79},"USN-7766-1",{"_key":81},"USN-7767-1",{"_key":83},"USN-7767-2",{"_key":85},"USN-7779-1",{"_key":87},"USN-7790-1",{"_key":89},"USN-7800-1",{"_key":91},"USN-7801-1",{"_key":93},"USN-7801-2",{"_key":95},"USN-7801-3",{"_key":97},"USN-7802-1",{"_key":99},"USN-7809-1",[],[102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117],{"_key":55},{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":57},"2025-04-01T15:47:03.408Z","2026-05-23T15:57:31.921Z","Modified",{"cisa_kev":122,"cisa_ransomware":122,"cisa_vendor":9,"epss_severity":123,"epss_score":124,"severity":125,"severity_score":126,"severity_version":127,"severity_source":128,"severity_vector":129,"severity_status":120},false,"low",0.00035,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[131,137,141,145],{"url":132,"sources":133,"tags":135},"https://git.kernel.org/stable/c/c96cce853542b3b13da3738f35ef1be8cfcc9d1d",[128,134],"nvd",[136],"Patch",{"url":138,"sources":139,"tags":140},"https://git.kernel.org/stable/c/f8094625a591eeb0b75b1bd9e713fac1d93f5ca9",[128,134],[136],{"url":142,"sources":143,"tags":144},"https://git.kernel.org/stable/c/7790a79c6fce8d5d552bc64f5c82819f719e4f28",[128,134],[136],{"url":146,"sources":147,"tags":148},"https://git.kernel.org/stable/c/b4f82f9ed43aefa79bec2504ae8c29be0c0f5d1d",[128,134],[136],[],{"date":151,"score":124,"percentile":152},"2026-06-03",0.1072,[154,158,161,164,167,170,173,176,178,181,184,187,190,193,196,200,203,206,209,212,215,218,221,224,227,230,233,236,239,242,245,247,250,253,256,259,262,265,268,271,274,277,280,284,287,290,293,296,299,302,305,308,311,315,319,322,325,328,331,334,337,340,343,346,349,352,355,358,361,364,366,369,372,375,378,380,383,386,389,392,395,398,401,404,408,411,414,417,420,423],{"date":155,"score":156,"percentile":157},"2025-11-04",0.00015,0.01874,{"date":159,"score":156,"percentile":160},"2025-11-05",0.019,{"date":162,"score":156,"percentile":163},"2025-11-06",0.0192,{"date":165,"score":156,"percentile":166},"2025-11-07",0.01926,{"date":168,"score":156,"percentile":169},"2025-11-08",0.01929,{"date":171,"score":156,"percentile":172},"2025-11-09",0.0193,{"date":174,"score":156,"percentile":175},"2025-11-10",0.01914,{"date":177,"score":156,"percentile":166},"2025-11-11",{"date":179,"score":156,"percentile":180},"2025-11-12",0.01939,{"date":182,"score":156,"percentile":183},"2025-11-13",0.01957,{"date":185,"score":156,"percentile":186},"2025-11-14",0.0196,{"date":188,"score":156,"percentile":189},"2025-11-15",0.01979,{"date":191,"score":156,"percentile":192},"2025-11-16",0.01983,{"date":194,"score":156,"percentile":195},"2025-11-17",0.0197,{"date":197,"score":198,"percentile":199},"2025-11-18",0.0003,0.04496,{"date":201,"score":198,"percentile":202},"2025-11-19",0.04536,{"date":204,"score":198,"percentile":205},"2025-11-20",0.04591,{"date":207,"score":156,"percentile":208},"2025-11-21",0.02031,{"date":210,"score":156,"percentile":211},"2025-11-22",0.02028,{"date":213,"score":156,"percentile":214},"2025-11-23",0.02026,{"date":216,"score":156,"percentile":217},"2025-11-24",0.02011,{"date":219,"score":156,"percentile":220},"2025-11-25",0.02006,{"date":222,"score":156,"percentile":223},"2025-11-26",0.01968,{"date":225,"score":156,"percentile":226},"2025-11-27",0.01967,{"date":228,"score":156,"percentile":229},"2025-11-28",0.01964,{"date":231,"score":156,"percentile":232},"2025-11-29",0.02012,{"date":234,"score":156,"percentile":235},"2025-11-30",0.02019,{"date":237,"score":156,"percentile":238},"2025-12-01",0.02061,{"date":240,"score":156,"percentile":241},"2025-12-02",0.02057,{"date":243,"score":156,"percentile":244},"2025-12-03",0.02065,{"date":246,"score":156,"percentile":214},"2025-12-04",{"date":248,"score":156,"percentile":249},"2025-12-05",0.0217,{"date":251,"score":156,"percentile":252},"2025-12-06",0.02175,{"date":254,"score":156,"percentile":255},"2025-12-07",0.02172,{"date":257,"score":156,"percentile":258},"2025-12-08",0.02174,{"date":260,"score":156,"percentile":261},"2025-12-09",0.02192,{"date":263,"score":156,"percentile":264},"2025-12-10",0.02225,{"date":266,"score":156,"percentile":267},"2025-12-11",0.02227,{"date":269,"score":156,"percentile":270},"2025-12-12",0.02235,{"date":272,"score":156,"percentile":273},"2025-12-13",0.02217,{"date":275,"score":156,"percentile":276},"2025-12-14",0.02222,{"date":278,"score":156,"percentile":279},"2025-12-15",0.0221,{"date":281,"score":282,"percentile":283},"2025-12-16",0.00018,0.03844,{"date":285,"score":282,"percentile":286},"2025-12-17",0.03881,{"date":288,"score":282,"percentile":289},"2025-12-18",0.039,{"date":291,"score":282,"percentile":292},"2025-12-19",0.03886,{"date":294,"score":282,"percentile":295},"2025-12-20",0.03889,{"date":297,"score":282,"percentile":298},"2025-12-21",0.03912,{"date":300,"score":282,"percentile":301},"2025-12-22",0.03877,{"date":303,"score":282,"percentile":304},"2025-12-23",0.03887,{"date":306,"score":282,"percentile":307},"2025-12-24",0.03897,{"date":309,"score":282,"percentile":310},"2025-12-25",0.03936,{"date":312,"score":313,"percentile":314},"2025-12-26",0.0002,0.04695,{"date":316,"score":317,"percentile":318},"2025-12-27",0.00025,0.06225,{"date":320,"score":313,"percentile":321},"2025-12-28",0.04687,{"date":323,"score":313,"percentile":324},"2025-12-29",0.04681,{"date":326,"score":313,"percentile":327},"2025-12-30",0.04622,{"date":329,"score":313,"percentile":330},"2025-12-31",0.0464,{"date":332,"score":313,"percentile":333},"2026-01-01",0.04719,{"date":335,"score":313,"percentile":336},"2026-01-02",0.04718,{"date":338,"score":313,"percentile":339},"2026-01-03",0.04705,{"date":341,"score":313,"percentile":342},"2026-01-04",0.04601,{"date":344,"score":313,"percentile":345},"2026-01-05",0.04538,{"date":347,"score":313,"percentile":348},"2026-01-06",0.04534,{"date":350,"score":313,"percentile":351},"2026-01-07",0.04554,{"date":353,"score":313,"percentile":354},"2026-01-08",0.04584,{"date":356,"score":313,"percentile":357},"2026-01-09",0.04583,{"date":359,"score":313,"percentile":360},"2026-01-10",0.04589,{"date":362,"score":313,"percentile":363},"2026-01-11",0.04574,{"date":365,"score":313,"percentile":354},"2026-01-12",{"date":367,"score":313,"percentile":368},"2026-01-13",0.04575,{"date":370,"score":313,"percentile":371},"2026-01-14",0.04618,{"date":373,"score":313,"percentile":374},"2026-01-15",0.04527,{"date":376,"score":313,"percentile":377},"2026-01-16",0.045,{"date":379,"score":313,"percentile":377},"2026-01-17",{"date":381,"score":313,"percentile":382},"2026-01-18",0.04481,{"date":384,"score":313,"percentile":385},"2026-01-19",0.04433,{"date":387,"score":313,"percentile":388},"2026-01-20",0.0439,{"date":390,"score":313,"percentile":391},"2026-01-21",0.0438,{"date":393,"score":313,"percentile":394},"2026-01-22",0.04365,{"date":396,"score":313,"percentile":397},"2026-01-23",0.04415,{"date":399,"score":313,"percentile":400},"2026-01-24",0.04459,{"date":402,"score":313,"percentile":403},"2026-01-25",0.04453,{"date":405,"score":406,"percentile":407},"2026-01-26",0.00054,0.16907,{"date":409,"score":406,"percentile":410},"2026-01-27",0.16897,{"date":412,"score":406,"percentile":413},"2026-01-28",0.16895,{"date":415,"score":406,"percentile":416},"2026-01-29",0.16873,{"date":418,"score":406,"percentile":419},"2026-01-30",0.16888,{"date":421,"score":406,"percentile":422},"2026-01-31",0.16902,{"date":424,"score":406,"percentile":425},"2026-02-01",0.16931,[427,432],{"source":128,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":428,"cvss_v4_0":9},{"baseScore":126,"baseSeverity":429,"vectorString":129,"impactScore":430,"exploitabilityScore":431},"HIGH",9.8,4.6,{"source":134,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":433,"cvss_v4_0":9},{"baseScore":126,"baseSeverity":429,"vectorString":129,"impactScore":430,"exploitabilityScore":431},[435,463],{"ecosystem":9,"name":436,"vendor":437,"product":437,"cpe_part":438,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":439},"Linux","linux","a",[440,447,450,453,456,458,462],{"version":441,"is_range":442,"range_type":128,"version_start":443,"version_start_type":444,"version_end":445,"version_end_type":446,"fixed_in":9},">= 9b3628d79b46f06157affc56fdb218fdd4988321, \u003C c96cce853542b3b13da3738f35ef1be8cfcc9d1d",true,"9b3628d79b46f06157affc56fdb218fdd4988321","including","c96cce853542b3b13da3738f35ef1be8cfcc9d1d","excluding",{"version":448,"is_range":442,"range_type":128,"version_start":443,"version_start_type":444,"version_end":449,"version_end_type":446,"fixed_in":9},">= 9b3628d79b46f06157affc56fdb218fdd4988321, \u003C f8094625a591eeb0b75b1bd9e713fac1d93f5ca9","f8094625a591eeb0b75b1bd9e713fac1d93f5ca9",{"version":451,"is_range":442,"range_type":128,"version_start":443,"version_start_type":444,"version_end":452,"version_end_type":446,"fixed_in":9},">= 9b3628d79b46f06157affc56fdb218fdd4988321, \u003C 7790a79c6fce8d5d552bc64f5c82819f719e4f28","7790a79c6fce8d5d552bc64f5c82819f719e4f28",{"version":454,"is_range":442,"range_type":128,"version_start":443,"version_start_type":444,"version_end":455,"version_end_type":446,"fixed_in":9},">= 9b3628d79b46f06157affc56fdb218fdd4988321, \u003C b4f82f9ed43aefa79bec2504ae8c29be0c0f5d1d","b4f82f9ed43aefa79bec2504ae8c29be0c0f5d1d",{"version":457,"is_range":122,"range_type":128,"version_start":457,"version_start_type":444,"version_end":457,"version_end_type":444,"fixed_in":9},"995c917d6818b39308ac6baf3f6573cb0486a238",{"version":459,"is_range":442,"range_type":128,"version_start":460,"version_start_type":444,"version_end":461,"version_end_type":446,"fixed_in":9},">= 5.17.14, \u003C 5.18","5.17.14","5.18",{"version":461,"is_range":122,"range_type":128,"version_start":461,"version_start_type":444,"version_end":461,"version_end_type":444,"fixed_in":9},{"ecosystem":9,"name":464,"vendor":437,"product":465,"cpe_part":466,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":467},"linux kernel","linux_kernel","o",[468,472,476,480,482],{"version":469,"is_range":442,"range_type":470,"version_start":9,"version_start_type":9,"version_end":471,"version_end_type":446,"fixed_in":9},"lt6.6.84","cpe","6.6.84",{"version":473,"is_range":442,"range_type":470,"version_start":474,"version_start_type":444,"version_end":475,"version_end_type":446,"fixed_in":9},"gte6.7_lt6.12.20","6.7","6.12.20",{"version":477,"is_range":442,"range_type":470,"version_start":478,"version_start_type":444,"version_end":479,"version_end_type":446,"fixed_in":9},"gte6.13_lt6.13.8","6.13","6.13.8",{"version":481,"is_range":122,"range_type":470,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.14:rc1",{"version":483,"is_range":122,"range_type":470,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.14:rc2"]