Bluetooth Vulnerability in Linux Kernel Affects PCIe Interface

CVE-2026-98392

What is CVE-2026-98392?

A vulnerability in the Bluetooth handling of the Linux kernel's PCIe interface could lead to improper bounds checking during the handling of transmission frames. This issue stems from incorrect validation of array indices in the context of txq's buffer handling, which, if left unaddressed, could allow for potential memory corruption or operational faults in Bluetooth devices. A fix has been implemented, altering the validation boundary to prevent out-of-range access.

References