Bluetooth Vulnerability in Linux Kernel Affecting Intel Devices

CVE-2026-98819

What is CVE-2026-98819?

A vulnerability in the Bluetooth implementation of the Linux kernel allows for improper validation of Display Data Channel (DDC) record lengths. This weakness can potentially lead to unexpected behavior when processing these records. The vulnerability specifically addresses the need to parse DDC record lengths using unsigned storage, ensuring that records are rejected if they are smaller than the required three-byte header, exceed the maximum allowable value, or surpass the remaining firmware bytes prior to calling the Intel_Write_DDC function. This was reported by Claude Mythos and has been resolved in the affected versions.

References