CVE-2026-98633

Received Received - Intake

Bluetooth skb leak in Linux kernel Bluetooth subsystem

Publication date: 2026-10-18

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() When CONFIG_DEV_COREDUMP=n, hci_devcd_append() returns -EOPNOTSUPP without freeing its skb argument. This leaks the cloned skb and also prevents nxp_set_ind_reset() from being called to perform recovery. Fix by guarding the hci_devcd_append(hdev, skb_clone(skb, GFP_ATOMIC)) call with IS_ENABLED(CONFIG_DEV_COREDUMP).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-18

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-18

EPSS Evaluated

N/A

NVD

CVE-2026-98633

EUVD

EUVD-2026-103547

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	998e447f443f138c90faa6ff3845082af419070e
Linux	Linux	998e447f443f138c90faa6ff3845082af419070e
Linux	Linux	998e447f443f138c90faa6ff3845082af419070e
Linux	Linux	6.15

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Bluetooth-related vulnerability in the Linux kernel affecting the btnxpuart driver. When a specific kernel configuration option (CONFIG_DEV_COREDUMP) is disabled, the system fails to properly handle firmware dumps, causing a memory leak of network buffers (skb) and preventing recovery mechanisms from executing.

Detection Guidance

This vulnerability is specific to the Linux kernel's Bluetooth subsystem and may not have direct network detection methods. Check if your kernel version includes the affected code path by examining the Bluetooth driver source or logs for btnxpuart-related errors.

Impact Analysis

This vulnerability could lead to resource exhaustion due to leaked memory buffers, potentially causing system instability or crashes. It may also disrupt Bluetooth functionality and prevent proper error recovery in affected devices.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Bluetooth-related kernel issue causing skb leaks under specific configuration conditions, which does not involve data protection or privacy violations typical of compliance frameworks.

Mitigation Strategies

Apply the kernel patch that guards hci_devcd_append() with IS_ENABLED(CONFIG_DEV_COREDUMP). Alternatively, enable CONFIG_DEV_COREDUMP in your kernel configuration to prevent the skb leak.

Hi! I’m here to help you understand CVE-2026-98633. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70