CVE-2026-98819Bluetooth: btintel: validate DDC record lengths
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate DDC record lengths Parse DDC record lengths in unsigned storage so 0xFF does not wrap. Reject records smaller than the mandatory three-byte header, records exceeding U8_MAX, and records exceeding remaining firmware bytes before issuing Intel_Write_DDC. This issue was reported by Claude Mythos.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 145f2368c5fd7962e37315ccc092670743019d08 before 069031f569f1681f17e863f48c221a6091b47850; from 145f2368c5fd7962e37315ccc092670743019d08 before b0fce76873a5e6a6820354409b26693ac5f8b251; from 145f2368c5fd7962e37315ccc092670743019d08 before f3617369fbb30a4d2e54841ab8e92ca4fa211e56; from 145f2368c5fd7962e37315ccc092670743019d08 before c9c15d4d8956df8c564f7c210e4dc5b9b820d97a | CNA record |
References
- https://git.kernel.org/stable/c/069031f569f1681f17e863f48c221a6091b47850
- https://git.kernel.org/stable/c/b0fce76873a5e6a6820354409b26693ac5f8b251
- https://git.kernel.org/stable/c/f3617369fbb30a4d2e54841ab8e92ca4fa211e56
- https://git.kernel.org/stable/c/c9c15d4d8956df8c564f7c210e4dc5b9b820d97a
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.