CVE-2026-98819

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-10-18 Modified: 2026-10-30 First seen: 2026-10-30 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate DDC record lengths Parse DDC record lengths in unsigned storage so 0xFF does not wrap. Reject records smaller than the mandatory three-byte header, records exceeding U8_MAX, and records exceeding remaining firmware bytes before issuing Intel_Write_DDC. This issue was reported by Claude Mythos.

Affected Software (9)

VendorProductVersion
Linux Linux 145f2368c5fd7962e37315ccc092670743019d08 < 780665bed305718a9fbb10e4aa4d5570d772c9f6
Linux Linux 145f2368c5fd7962e37315ccc092670743019d08 < 93f00db7441eec84a11029662f04b152386107a9
Linux Linux 145f2368c5fd7962e37315ccc092670743019d08 < e65c8f4ca39959889fcaf9779c3adf1a421aeb8d
Linux Linux 145f2368c5fd7962e37315ccc092670743019d08 < 7df748aa9f9ecab514e5989ed89c9ba35b6e5574
Linux Linux 145f2368c5fd7962e37315ccc092670743019d08 < 069031f569f1681f17e863f48c221a6091b47850
Linux Linux 145f2368c5fd7962e37315ccc092670743019d08 < b0fce76873a5e6a6820354409b26693ac5f8b251
Linux Linux 145f2368c5fd7962e37315ccc092670743019d08 < f3617369fbb30a4d2e54841ab8e92ca4fa211e56
Linux Linux 145f2368c5fd7962e37315ccc092670743019d08 < c9c15d4d8956df8c564f7c210e4dc5b9b820d97a
Linux Linux 4.4

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.18%
Raw Score 0.001840
Percentile 8.0%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00184
2026-10-31
0.00184
2026-10-30
0.00175
2026-10-29
0.00175

Intelligence Sources

mitre ref →
nvd ref →