PT-2026-106620

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel pcie: fix off-by-one bounds check in RX submit btintel pcie submit rx used frbd index rxq-count to guard the FRBD array access, allowing frbd index == rxq-count to pass through and index one element past the en...

PT-2026-106625

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel pcie: validate TX skb length in send sync btintel pcie prepare tx copies skb-len bytes into a fixed BTINTEL PCIE BUFFER SIZE 4096 DMA slot via an unchecked memcpy. Oversized packets are currently rejected only ...

PT-2026-98640

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where the btintel pcie submit rx work function reads the packet len variable from rfh hdr without verifying if it exceeds the RX buffer size. A...

The vulnerability of the btintel_pcie_setup_hdev() function in the Linux kernel’s Bluetooth device support driver allows a hacker to cause a service failure.

The vulnerability of the btintelpciesetuphdev function in the Linux kernel’s Bluetooth device support driver is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2024-46869

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: Allocate memory for driver private data Fix driver not allocating memory for struct btinteldata which is used to store internal data...

PT-2024-32262

Name of the Vulnerable Software and Affected Versions Linux kernel versions up to 6.10.11/6.11.0 Description A vulnerability in the Linux kernel's Bluetooth component, specifically in the btintel pcie driver, has been resolved. The issue was caused by the driver not allocating memory for the...