CVE-2026-98819

A flaw was found in the Linux kernel's Intel Bluetooth driver. When processing Device Descriptor Configuration DDC records, the driver fails to properly validate record lengths, allowing integer wrapping and reading past buffer boundaries. An attacker capable of supplying crafted firmware data...

CVE-2026-98732

A flaw was found in the Linux kernel's Intel Bluetooth driver. When processing hardware error events, the driver logs event data as a string without verifying that the received payload is properly null-terminated. A physically proximate attacker or compromised Bluetooth device could exploit this...

CVE-2026-98111

A flaw was found in the Linux kernel's Intel Bluetooth driver. When processing version response packets from hardware, the driver fails to verify that Type-Length-Value TLV data fields meet the minimum required length. A malicious or rogue Bluetooth controller can supply a crafted response with...

CVE-2026-98110

A flaw was found in the Linux kernel's Intel Bluetooth driver. An attacker with a malicious or compromised Bluetooth device could exploit this vulnerability by providing a crafted response during firmware initialization that lacks a null terminator. Because the driver treats the firmware identifi...

CVE-2026-31500

A flaw was found in the Linux kernel's Bluetooth subsystem. A race condition exists in the Intel Bluetooth driver, where two functions can access the same memory concurrently without proper synchronization. This can lead to a use-after-free vulnerability, allowing a local attacker to potentially...

PT-2025-23448 · Intel · Intel Bluetooth Driver

Name of the Vulnerable Software and Affected Versions: Intel Bluetooth driver affected versions not specified Description: The issue is related to an incorrect bounds check in the Bluetooth driver, which could lead to a possible out of bounds write. This could result in local escalation of...

CVE-2018-3669

A STOP error BSoD in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network...