EUVD-2026-103646

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: validate device-supplied DMA indices In btintelpciemsixrxhandle, the driver processes RX completion descriptors urbd1 written by the PCIe device into DMA-coherent memory. urbd1-frbdtag a 16-bit field fully...

CVE-2026-98601 Bluetooth: btintel_pcie: validate device-supplied DMA indices

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: validate device-supplied DMA indices In btintelpciemsixrxhandle, the driver processes RX completion descriptors urbd1 written by the PCIe device into DMA-coherent memory. urbd1-frbdtag a 16-bit field fully...

CVE-2026-98601

The Linux kernel contains a vulnerability in the btintel_pcie driver where the btintel_pcie_msix_rx_handle() function fails to validate device-supplied DMA indices. A malicious or malfunctioning device can provide an out-of-range frbd_tag (a 16-bit field), leading the driver to dereference an out...