CVE-2026-98819

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-98819

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98819.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-98819

Downstream

Published

2026-10-18T15:49:11Z

Modified

2026-10-19T02:47:28Z

Summary

Bluetooth: btintel: validate DDC record lengths

Details

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btintel: validate DDC record lengths

Parse DDC record lengths in unsigned storage so 0xFF does not wrap. Reject records smaller than the mandatory three-byte header, records exceeding U8_MAX, and records exceeding remaining firmware bytes before issuing Intel_Write_DDC.

This issue was reported by Claude Mythos.

Database specific

{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98819.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

145f2368c5fd7962e37315ccc092670743019d08

Fixed

069031f569f1681f17e863f48c221a6091b47850

Fixed

b0fce76873a5e6a6820354409b26693ac5f8b251

Fixed

f3617369fbb30a4d2e54841ab8e92ca4fa211e56

Fixed

c9c15d4d8956df8c564f7c210e4dc5b9b820d97a

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98819.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.4.0

Fixed

6.12.113

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.18.56

Type: ECOSYSTEM
Events: Introduced

6.19.0

Fixed

7.2.10

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98819.json"