Bluetooth Protocol Vulnerability in Linux Kernel by Linux Foundation

CVE-2026-99094

What is CVE-2026-99094?

A bounds checking issue was identified in the Linux Kernel's Bluetooth protocol handling, particularly in the btintel_pcie driver. The function btintel_pcie_prepare_tx() incorrectly utilized the tfd_index for accessing arrays, enabling potential out-of-bounds access if the index equals txq->count. This flaw could lead to instability or other unintended behaviors in affected versions of the Linux Kernel. The vulnerability has been addressed to ensure proper bounds checking is enforced, preventing such risks.

References