CVE-2026-98732
Received Received - Intake

Bluetooth Buffer Over-Read in Linux Kernel

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: fix buffer over-read in btintel_hw_error() The "Exception info %s" print uses skb->data + 1, but the 12-byte payload is not guaranteed to be NUL-terminated and can be read past its end. Bound the print with "%.*s" and skb->len - 1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98732
EUVD
EUVD-2026-103817

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Linux Linux 973bb97e5aee56edddaae3d5c96877101ad509c0
Linux Linux 973bb97e5aee56edddaae3d5c96877101ad509c0
Linux Linux 973bb97e5aee56edddaae3d5c96877101ad509c0
Linux Linux 973bb97e5aee56edddaae3d5c96877101ad509c0
Linux Linux 4.3

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a buffer over-read vulnerability in the Linux kernel's Bluetooth subsystem. It occurs in the btintel_hw_error function where an error message print statement reads one byte past the end of a 12-byte payload buffer. The issue arises because the payload may not be NUL-terminated, causing the print operation to access invalid memory.

Detection Guidance

This vulnerability is specific to the Linux kernel's Bluetooth subsystem and may not have direct network detection commands. Monitor kernel logs for Bluetooth-related errors or crashes using 'dmesg | grep -i bluetooth' or 'journalctl -k | grep -i bluetooth'. Check for unusual Bluetooth adapter behavior or unexpected disconnections.

Impact Analysis

This vulnerability could allow an attacker to read sensitive kernel memory, potentially exposing confidential data or causing system instability. It may be exploited remotely via Bluetooth if the vulnerable kernel is running on a device with Bluetooth enabled.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. Disable Bluetooth if not in use with 'rfkill block bluetooth'. Restrict Bluetooth device connections to trusted sources only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98732. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart