CVE-2026-63947

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: HIDP: fix missing length checks in hidpinputreport hidpinputreport reads keyboard and mouse payload data from an skb without first verifying that skb-len contains enough data. hidprecvintrframe pulls the 1-byte HIDP...

CVE-2026-63947

CVE-2026-63947 concerns the Linux kernel Bluetooth HIDP path. The vulnerability arises in hidp_input_report(), which reads keyboard/mouse payloads from an skb without first ensuring skb->len has enough data. The caller hidp_recv_intr_frame() fetches the 1-byte HIDP header before dispatching to...

PT-2026-61264

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the Bluetooth HIDP component. The hidp input report function processes keyboard and mouse payload data from an skb socket buffer without verifying if...