QID 198468

The bluetooth subsystem in the linux kernel did not properly perform access control.
The xen netback driver in the linux kernel did not properly handle malformed packets from a network pv frontend, leading to a use-after-free vulnerability.
The bluetooth subsystem in the linux kernel did not properly handle hci device initialization failure, leading to a double-free vulnerability.
The bluetooth subsystem in the linux kernel did not properly handle hci device detach events, leading to a use-after-free vulnerability.
The nfc implementation in the linux kernel did not properly handle failed connect events leading to a null pointer dereference.

Note: The preceding description block is extracted directly from the security advisory. Using automation, we have attempted to clean and format it as much as possible without introducing additional issues.

an authenticated attacker could possibly use this to expose sensitive information. (
Cve-2020-26558, cve-2021-0129).
An attacker in a guest vm could use this to cause a denial of service or possibly execute arbitrary code.
(cve-2021-28691).
An attacker could use this to cause a denial of service or possibly execute arbitrary code. (
Cve-2021-3564).
An attacker could use this to cause a denial of service or possibly execute arbitrary code. (
Cve-2021-3573).
A local attacker could use this to cause a denial of service.
(cve-2021-38208).