Linux Kernel Bluetooth Vulnerability in btusb Driver

CVE-2026-31497

What is CVE-2026-31497?

A vulnerability exists in the btusb driver of the Linux kernel, where the mapping of active SCO links to USB alternate settings does not properly constrain the index used for lookup. Specifically, the number of active SCO links is directly passed to the lookup without ensuring it does not exceed the limited size of the SCO alternate settings table, which only accommodates three links. This can lead to the potential risk of accessing memory that is outside the bounds of the intended array, which might impact system stability and security.

References