CVE-2026-98732
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2026-10-18
Modified: 2026-10-30
First seen: 2026-10-30
Status: pending_score
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: fix buffer over-read in btintel_hw_error() The "Exception info %s" print uses skb->data + 1, but the 12-byte payload is not guaranteed to be NUL-terminated and can be read past its end. Bound the print with "%.*s" and skb->len - 1.
Affected Software (9)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 973bb97e5aee56edddaae3d5c96877101ad509c0 < 162bb126d5c07a0150a171f8f3f1996e445922b3 |
| Linux | Linux | 973bb97e5aee56edddaae3d5c96877101ad509c0 < d850e34c73175f5d7860b17f4810fcb6e5ab8727 |
| Linux | Linux | 973bb97e5aee56edddaae3d5c96877101ad509c0 < 0fa8630506f36374911772647bc5bcfeb47c5195 |
| Linux | Linux | 973bb97e5aee56edddaae3d5c96877101ad509c0 < be58b239d2be5da7a7fac11d3eb8bf75dce6511b |
| Linux | Linux | 973bb97e5aee56edddaae3d5c96877101ad509c0 < bbc7de352f3f3864369c904aac944c7de84c6e7b |
| Linux | Linux | 973bb97e5aee56edddaae3d5c96877101ad509c0 < c42ce5373405ca93946311652c51ccfeb1c2d913 |
| Linux | Linux | 973bb97e5aee56edddaae3d5c96877101ad509c0 < 673f707518e8ef03306f84c512cb160971f175fe |
| Linux | Linux | 973bb97e5aee56edddaae3d5c96877101ad509c0 < 40eb4b18ad167b63644c27fa67a7400ba050379a |
| Linux | Linux | 4.3 |