Buffer Over-read Vulnerability in Linux Kernel Bluetooth Module
Summary
DEBIAN-CVE-2026-98732: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: fix buffer over-read in btintel_hw_error() The "Exception info %s" print uses skb->data + 1, but the 12-byte payload is not guarante... Affects linux versions 6.1.106-1 – 7.3~rc7-1~exp1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware and software interactions. It supports a wide range of functionalities, including networking, file systems, and device management. The Bluetooth module within the kernel facilitates wireless communication between devices. This vulnerability specifically affects the Bluetooth functionality, potentially exposing systems to security risks.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the Bluetooth module, specifically in the btintel_hw_error() function. The issue arises from the use of skb->data + 1 in the 'Exception info %s' print statement, where the 12-byte payload is not guaranteed to be NUL-terminated. This can lead to a buffer over-read, allowing attackers to read beyond the intended memory bounds, which may result in information leakage or system instability.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, no specific workaround is provided for this vulnerability. It is advisable to apply the patch as soon as it becomes available.
Conclusion
The buffer over-read vulnerability in the Linux kernel's Bluetooth module poses significant security risks. It is essential for users to update their systems to the latest patched versions to protect against potential exploits. Regular monitoring with tools like Vulert can help maintain awareness of vulnerabilities.
See every vulnerability recorded for linux →
FAQ
The vulnerability can lead to buffer over-reads, potentially allowing attackers to access sensitive information or cause system instability.
All versions prior to the patched versions (6.12.113-1 for Debian 13 and 7.2.10-1 for Debian 14) are affected.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Yes, updating to the patched versions of the Linux kernel will resolve the vulnerability.
While no specific workaround is available, it is crucial to prioritize applying the patch as soon as possible to mitigate risks.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
