SB20260816215 - Use of uninitialized resource in Linux kernel bluetooth hidp

Description

This security bulletin contains information about 1 vulnerability.

1) Use of uninitialized resource (CVE-ID: CVE-2026-74508)

CWE-ID: CWE-908 - Use of Uninitialized Resource

CVSSv4: 6.9 [CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to cause a denial of service.

The vulnerability exists due to use of uninitialized memory in hidp_recv_ctrl_frame() and hidp_recv_intr_frame() in the HIDP subsystem when processing crafted Bluetooth HIDP frames without a transaction header. A remote user can send a specially crafted empty or malformed frame to cause a denial of service.

The issue can terminate the HIDP session when a malformed lower-layer packet causes an extra byte to be consumed as a virtual cable unplug control value.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/2ebf63aa557a69990b4e9ea22be224d58aabce96
• https://git.kernel.org/stable/c/46ca5ab39737d7c6f9ca77ecf714cdcfa6caaeec
• https://git.kernel.org/stable/c/47778d2c2087b5d192398f6fddf692d16a5431cf
• https://git.kernel.org/stable/c/854194494a6f726a60b90b76059148bf08df023d
• https://git.kernel.org/stable/c/97b61241ab45bfa5b0526cb0f3978942493bc811