CVE-2026-98819

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btintel: validate DDC record lengths

Parse DDC record lengths in unsigned storage so 0xFF does not wrap. Reject records smaller than the mandatory three-byte header, records exceeding U8 MAX, and records exceeding remaining firmware bytes before issuing Intel Write DDC.

This issue was reported by Claude Mythos.