CVE-2026-68339

A flaw was found in the Linux kernel's Bluetooth subsystem btusb driver. An attacker could craft a two-byte vendor event that, due to improper validation of the Realtek vendor event length in the btusbrecveventrealtek function, could lead to the system attempting to read a non-existent third byte...