CVE-2026-98633

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btnxpuart: Fix skb leak in nxp process fw dump()

When CONFIG DEV COREDUMP=n, hci devcd append() returns -EOPNOTSUPP without freeing its skb argument. This leaks the cloned skb and also prevents nxp set ind reset() from being called to perform recovery.

Fix by guarding the hci devcd append(hdev, skb clone(skb, GFP ATOMIC)) call with IS ENABLED(CONFIG DEV COREDUMP).