PT-2026-116951 · Linux · Linux

CVE-2026-98732

Published

2026-10-18

Updated

2026-10-18

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btintel: fix buffer over-read in btintel hw error()

The "Exception info %s" print uses skb->data + 1, but the 12-byte payload is not guaranteed to be NUL-terminated and can be read past its end.

Bound the print with "%.*s" and skb->len - 1.

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-98732

Linux