CVE-2026-98819 is a vulnerability in Linux Kernel
Published on October 18, 2026
Bluetooth: btintel: validate DDC record lengths
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btintel: validate DDC record lengths
Parse DDC record lengths in unsigned storage so 0xFF does not wrap.
Reject records smaller than the mandatory three-byte header, records
exceeding U8_MAX, and records exceeding remaining firmware bytes before
issuing Intel_Write_DDC.
This issue was reported by Claude Mythos.
Products Associated with CVE-2026-98819
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 145f2368c5fd7962e37315ccc092670743019d08 and below 069031f569f1681f17e863f48c221a6091b47850 is affected.
- Version 145f2368c5fd7962e37315ccc092670743019d08 and below b0fce76873a5e6a6820354409b26693ac5f8b251 is affected.
- Version 145f2368c5fd7962e37315ccc092670743019d08 and below f3617369fbb30a4d2e54841ab8e92ca4fa211e56 is affected.
- Version 145f2368c5fd7962e37315ccc092670743019d08 and below c9c15d4d8956df8c564f7c210e4dc5b9b820d97a is affected.
- Version 4.4 is affected.
- Before 4.4 is unaffected.
- Version 6.12.113, <= 6.12.* is unaffected.
- Version 6.18.56, <= 6.18.* is unaffected.
- Version 7.2.10, <= 7.2.* is unaffected.
- Version 7.3-rc6, <= * is unaffected.