-

CVE-2026-98291

Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit

btintel_pcie_submit_rx() used frbd_index > rxq->count to guard the
FRBD array access, allowing frbd_index == rxq->count to pass through
and index one element past the end of the array. Change the check to
>= rxq->count so every out-of-range index is rejected.

This issue was reported by Claude Mythos.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version c2b636b3f788d10486a6691ad6dd3ec4c93bd78e
Version < b5214d72bfdf8ef7744d0c8147e6ebb09b36b259
Status affected
Version c2b636b3f788d10486a6691ad6dd3ec4c93bd78e
Version < 18464860ce27af0dccd2fc72830610b85b518cff
Status affected
Version c2b636b3f788d10486a6691ad6dd3ec4c93bd78e
Version < de4c3c72bcc6e8474f70c22427f94ca44bccd890
Status affected
Version c2b636b3f788d10486a6691ad6dd3ec4c93bd78e
Version < 2ea5a87a5a7ae58cb2662b8a7d06f209383e1765
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.10
Status affected
Version 0
Version < 6.10
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.54
Status unaffected
Version <= 7.2.*
Version 7.2.8
Status unaffected
Version <= *
Version 7.3-rc4
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.064
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/b5214d72bfdf8ef7744d0c8147e6ebb09b36b259
https://git.kernel.org/stable/c/18464860ce27af0dccd2fc72830610b85b518cff
https://git.kernel.org/stable/c/de4c3c72bcc6e8474f70c22427f94ca44bccd890
https://git.kernel.org/stable/c/2ea5a87a5a7ae58cb2662b8a7d06f209383e1765