CVE-2026-98732 Bluetooth: btintel: fix buffer over-read in btintel_hw_error()
A buffer over-read in the Linux kernel Bluetooth driver allows attackers to read sensitive memory or cause a crash via malformed packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-98732?
CVE-2026-98732 is a vulnerability in Linux, published on 18 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btintel: fix buffer over-read in btintel_hw_error()
The "Exception info %s" print uses skb->data + 1, but the 12-byte payload is not guaranteed to be NUL-terminated and can be read past its end.
Bound the print with "%.*s" and skb->len - 1.
Which versions are affected by CVE-2026-98732?
How do I fix CVE-2026-98732?
Apply the vendor's patch.
Is CVE-2026-98732 being exploited?
There is no known exploitation of CVE-2026-98732 in the wild and no public exploit code.
Sources
Also known as AZL-109323, BELL-CVE-2026-98732, DEBIAN-CVE-2026-98732, GHSA-ww29-ppp3-6wfc, UBUNTU-CVE-2026-98732.