Unrated severityNVD Advisory· Published Sep 25, 2026

CVE-2026-98110

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btintel: bound firmware ID by TLV length

The firmware ID is treated as a NUL-terminated string even though the TLV length is its only boundary. If the value does not contain a NUL terminator, snprintf() can read beyond the received response.

Limit the conversion to the advertised TLV value length.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Kernelllm-create

Patches

Vulnerability mechanics

References

git.kernel.org/stable/c/058f56de5f48ba4b3be01526006ac83ce9e79f39nvd
git.kernel.org/stable/c/a07b3024a927892dd46e7dfbed438e8834e24098nvd
git.kernel.org/stable/c/ac8aa9e0ec93a12a60230066f199f49c3b9aac3dnvd
git.kernel.org/stable/c/aef56a2bd5aa22808ce508605d7497d2b5e8eb5fnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000