All vulnerabilities
CVE-2026-98819

Linux: Bluetooth: btintel: validate DDC record lengths

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.18%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in7df748aa9f9ecab514e5989ed89c9ba35b6e5574Also 069031f569f1681f17e863f48c221a6091b47850CVE List
Published18 Oct 2026Updated 21 Oct 2026CVE List

What fixes it

  • 7df748aa9f9ecab514e5989ed89c9ba35b6e5574LinuxCVE List
  • 069031f569f1681f17e863f48c221a6091b47850LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btintel: validate DDC record lengths

Parse DDC record lengths in unsigned storage so 0xFF does not wrap. Reject records smaller than the mandatory three-byte header, records exceeding U8_MAX, and records exceeding remaining firmware bytes before issuing Intel_Write_DDC.

This issue was reported by Claude Mythos.

Text from CVE List

Affected versions 12

  • Linuxaffected: 145f2368c5fd7962e37315ccc092670743019d08 before 7df748aa9f9ecab514e5989ed89c9ba35b6e5574CVE List
  • Linuxaffected: 145f2368c5fd7962e37315ccc092670743019d08 before 069031f569f1681f17e863f48c221a6091b47850CVE List
  • Linuxaffected: 145f2368c5fd7962e37315ccc092670743019d08 before b0fce76873a5e6a6820354409b26693ac5f8b251CVE List
  • Linuxaffected: 145f2368c5fd7962e37315ccc092670743019d08 before f3617369fbb30a4d2e54841ab8e92ca4fa211e56CVE List
  • Linuxaffected: 145f2368c5fd7962e37315ccc092670743019d08 before c9c15d4d8956df8c564f7c210e4dc5b9b820d97aCVE List
  • Linuxaffected: 4.4CVE List
  • Linuxunaffected: all versions before 4.4CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.113 through 6.12.*CVE List
  • Linuxunaffected: 6.18.56 through 6.18.*CVE List
  • Linuxunaffected: 7.2.10 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 5