CVE-2026-31497 Bluetooth: btusb: clamp SCO altsetting table indices

🗓️ 22 Apr 2026 13:54:19Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

Fixed a bounds check in Bluetooth driver to clamp alternate setting indices to available entries.

Reporter	Title	Published	Views	Family All 39
cbl_mariner	CVE-2026-31497 affecting package kernel for versions less than 6.6.134.1-2	3 May 202620:52	–	cbl_mariner
circl	CVE-2026-31497	5 May 202620:00	–	circl
cnnvd	Linux kernel 安全漏洞	22 Apr 202600:00	–	cnnvd
cve	CVE-2026-31497	22 Apr 202613:54	–	cve
cvelist	CVE-2026-31497 Bluetooth: btusb: clamp SCO altsetting table indices	22 Apr 202613:54	–	cvelist
debian	[SECURITY] [DLA 4561-1] linux-6.1 security update	2 May 202608:40	–	debian
debian	[SECURITY] [DLA 4606-1] linux security update	29 May 202616:36	–	debian
debian	[SECURITY] [DSA 6238-1] linux security update	30 Apr 202620:05	–	debian
debian	[SECURITY] [DSA 6243-1] linux security update	1 May 202619:10	–	debian
debiancve	CVE-2026-31497	22 Apr 202613:54	–	debiancve

Source	Link
git	www.git.kernel.org/stable/c/1019028eb124564cf7bca58a16f1df8a1ca30726
git	www.git.kernel.org/stable/c/129fa608b6ad08b8ab7178eeb2ec272c993aaccc
git	www.git.kernel.org/stable/c/21c254202f9d78abe0fcd642a92966deb92bd226
git	www.git.kernel.org/stable/c/312c4450fe23014665c163f480edd5ad2e27bbb8
git	www.git.kernel.org/stable/c/476c9262b430c38c6a701a3b8176a3f48689085b
git	www.git.kernel.org/stable/c/6fba3c3d48c927e55611a0f5ea34da88138ed0ff
git	www.git.kernel.org/stable/c/834cf890d2c3d29cbfa1ee2376c40469c28ec297
git	www.git.kernel.org/stable/c/9dd13a8641de79bc1bc93da55cdd35259a002683
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31497.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-31497

15 Jul 2026 01:49Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.5

EPSS0.00123

bluetooth driver alternate setting indices clamp table entries bounds check linux kernel