SB20261007123 - Out-of-bounds read in Linux kernel bluetooth

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261007123

SB20261007123 - Out-of-bounds read in Linux kernel bluetooth

Published: October 7, 2026

Security Bulletin ID SB20261007123
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Out-of-bounds read (CVE-ID: CVE-2026-98247)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 0 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a local user to trigger an out-of-bounds read.

The vulnerability exists due to an out-of-bounds read in the Bluetooth Read Local Supported Codecs parsers when processing a controller reply that ends immediately after the standard codec array. A local user can supply such a reply to trigger an out-of-bounds read.

The vendor codec count is accessed beyond the socket buffer data while calculating the vendor codec array size. Both command variants are affected.


Remediation

Install update from vendor's website.

References