CVE-2026-98730

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: reject oversized TX packets in sendframe btintelpciesendframe eventually copies skb-data into a fixed BTINTELPCIEBUFFERSIZE 4096 DMA buffer via memcpy in btintelpciepreparetx, with a 4-byte PCIe type heade...

EUVD-2026-103815

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: reject oversized TX packets in sendframe btintelpciesendframe eventually copies skb-data into a fixed BTINTELPCIEBUFFERSIZE 4096 DMA buffer via memcpy in btintelpciepreparetx, with a 4-byte PCIe type heade...

CVE-2026-98730 Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: reject oversized TX packets in sendframe btintelpciesendframe eventually copies skb-data into a fixed BTINTELPCIEBUFFERSIZE 4096 DMA buffer via memcpy in btintelpciepreparetx, with a 4-byte PCIe type heade...

CVE-2026-98730

The Linux kernel contains a vulnerability in the btintel_pcie driver where the btintel_pcie_send_frame() function fails to validate the size of transmitted packets. Specifically, it copies skb->data into a fixed-size DMA buffer (4096 bytes) using memcpy() in btintel_pcie_prepare_tx() , prepend...