CVE-2026-98392 is a vulnerability in Linux Kernel
Published on October 14, 2026
Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one
Valid indices into txq->urbd0s/tfds/bufs are 0..txq->count-1, so
tfd_index == txq->count is already out of range. Change the guard in
btintel_pcie_msix_tx_handle() from '> txq->count' to '>= txq->count'.
This issue was reported by Claude Mythos.
Products Associated with CVE-2026-98392
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version c2b636b3f788d10486a6691ad6dd3ec4c93bd78e and below 72bbd7c815ef92399b7b109977ae4669ce22ee6e is affected.
- Version c2b636b3f788d10486a6691ad6dd3ec4c93bd78e and below 932a87444107e6724d808082676bba5c915c98ad is affected.
- Version c2b636b3f788d10486a6691ad6dd3ec4c93bd78e and below a641201a9b4d69ee8a7ef35f7aa597dddee6b9ee is affected.
- Version c2b636b3f788d10486a6691ad6dd3ec4c93bd78e and below 3dd1b41f96aad08444be1b7626c89de2b9f2abd4 is affected.
- Version 6.10 is affected.
- Before 6.10 is unaffected.
- Version 6.12.111, <= 6.12.* is unaffected.
- Version 6.18.53, <= 6.18.* is unaffected.
- Version 7.2.7, <= 7.2.* is unaffected.
- Version 7.3-rc3, <= * is unaffected.