Riskcovery

CVE-2026-98392

Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one

State
Published
Severity
Not scored
Published
Oct 14, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one

Valid indices into txq->urbd0s/tfds/bufs are 0..txq->count-1, so tfd_index == txq->count is already out of range. Change the guard in btintel_pcie_msix_tx_handle() from '> txq->count' to '>= txq->count'.

This issue was reported by Claude Mythos.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c2b636b3f788d10486a6691ad6dd3ec4c93bd78e to before 72bbd7c815ef92399b7b109977ae4669ce22ee6eAffected
  • c2b636b3f788d10486a6691ad6dd3ec4c93bd78e to before 932a87444107e6724d808082676bba5c915c98adAffected
  • c2b636b3f788d10486a6691ad6dd3ec4c93bd78e to before a641201a9b4d69ee8a7ef35f7aa597dddee6b9eeAffected
  • c2b636b3f788d10486a6691ad6dd3ec4c93bd78e to before 3dd1b41f96aad08444be1b7626c89de2b9f2abd4Affected
LinuxLinux
  • 6.10Affected
  • before 6.10Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.