Linux Bluetooth btintelHW_error() Buffer Overflow

The vulnerability of the btintelHWerror function in the drivers/bluetooth/btintel.c module of the Linux Bluetooth device driver is related to synchronization errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

CVE-2026-74532

A flaw was found in the Bluetooth btintel driver of the Linux kernel. The btinteldiagnostics function fails to validate the length of a diagnostics Vendor Specific Event VSE before accessing its data. This oversight allows an attacker to potentially read data beyond the intended memory boundary,...

CVE-2026-31500

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: serialize btintelhwerror with hcireqsynclock btintelhwerror issues two hcicmdsync calls HCIOPRESET and Intel exception-info retrieval without holding hcireqsynclock. This lets it race against hcidevdoclose -...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of hcireqsynclock protection in the btintelhwerror function within the btintel driver...

SUSE CVE-2025-38315

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Check dsbr size from EFI variable Since the size of struct btinteldsbr is already known, we can just start there instead of querying the EFI variable size. If the final result doesn't match what we expect also...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a failure to check the dsbr size in the btintel driver, which could lead to a stack buffer overflow...