CVE-2026-98291Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit btintel_pcie_submit_rx() used frbd_index > rxq->count to guard the FRBD array access, allowing frbd_index == rxq->count to pass through and index one element past the end of the array. Change the check to >= rxq->count so every out-of-range index is rejected. This issue was reported by Claude Mythos.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from c2b636b3f788d10486a6691ad6dd3ec4c93bd78e before b5214d72bfdf8ef7744d0c8147e6ebb09b36b259; from c2b636b3f788d10486a6691ad6dd3ec4c93bd78e before 18464860ce27af0dccd2fc72830610b85b518cff; from c2b636b3f788d10486a6691ad6dd3ec4c93bd78e before de4c3c72bcc6e8474f70c22427f94ca44bccd890; from c2b636b3f788d10486a6691ad6dd3ec4c93bd78e before 2ea5a87a5a7ae58cb2662b8a7d06f209383e1765 | CNA record |
References
- https://git.kernel.org/stable/c/b5214d72bfdf8ef7744d0c8147e6ebb09b36b259
- https://git.kernel.org/stable/c/18464860ce27af0dccd2fc72830610b85b518cff
- https://git.kernel.org/stable/c/de4c3c72bcc6e8474f70c22427f94ca44bccd890
- https://git.kernel.org/stable/c/2ea5a87a5a7ae58cb2662b8a7d06f209383e1765
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.