BleedingTooth: Critical Linux kernel Bluetooth vulnerability (prior to 5.9) (lwn.net)

Note that Intel's advisory has since been corrected to say "All Linux kernel versions before 5.10 that support BlueZ" are affected. The fix is not in 5.9 nor any stable, so this is essentially a 0day.

For more details, see https://lwn.net/Articles/834325/ and other comments on the LWN article.

Sounds like a pretty bad vulnerability and hackernews missed it (like myself for 2 days...). https://news.ycombinator.com/item?id=24782246 had the most activities but still pretty lame.