CVE-2026-98819 Bluetooth: btintel: validate DDC record lengths
A missing length validation in the Linux kernel Bluetooth driver allows attackers to trigger integer overflows, potentially causing crashes or code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-98819?
CVE-2026-98819 is a vulnerability in Linux, published on 18 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btintel: validate DDC record lengths
Parse DDC record lengths in unsigned storage so 0xFF does not wrap. Reject records smaller than the mandatory three-byte header, records exceeding U8_MAX, and records exceeding remaining firmware bytes before issuing Intel_Write_DDC.
This issue was reported by Claude Mythos.
Which versions are affected by CVE-2026-98819?
How do I fix CVE-2026-98819?
Apply the vendor's patch.
Is CVE-2026-98819 being exploited?
There is no known exploitation of CVE-2026-98819 in the wild and no public exploit code.
Sources
Also known as AZL-108599, BELL-CVE-2026-98819, DEBIAN-CVE-2026-98819, GHSA-h69r-276q-7c65, UBUNTU-CVE-2026-98819.