Riskcovery

CVE-2026-98633

Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()

When CONFIG_DEV_COREDUMP=n, hci_devcd_append() returns -EOPNOTSUPP without freeing its skb argument. This leaks the cloned skb and also prevents nxp_set_ind_reset() from being called to perform recovery.

Fix by guarding the hci_devcd_append(hdev, skb_clone(skb, GFP_ATOMIC)) call with IS_ENABLED(CONFIG_DEV_COREDUMP).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 998e447f443f138c90faa6ff3845082af419070e to before 8a36598050cd1e5abb1d5ed42cc224cfcb538c4fAffected
  • 998e447f443f138c90faa6ff3845082af419070e to before edcb84ee607a9ddfc6f2771a7f399115f0b0f19dAffected
  • 998e447f443f138c90faa6ff3845082af419070e to before f2bbb36426581045a8bf7793da5419b9375e4348Affected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.55 through 6.18.*Not affected
  • 7.2.9 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.