{"id":"CVE-2026-98732","published":"2026-10-18T16:17:26.807","lastModified":"2026-10-19T10:19:37.343","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btintel: fix buffer over-read in btintel_hw_error()\n\nThe \"Exception info %s\" print uses skb->data + 1, but the 12-byte\npayload is not guaranteed to be NUL-terminated and can be read past\nits end.\n\nBound the print with \"%.*s\" and skb->len - 1.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/40eb4b18ad167b63644c27fa67a7400ba050379a","tags":[]},{"url":"https://git.kernel.org/stable/c/673f707518e8ef03306f84c512cb160971f175fe","tags":[]},{"url":"https://git.kernel.org/stable/c/bbc7de352f3f3864369c904aac944c7de84c6e7b","tags":[]},{"url":"https://git.kernel.org/stable/c/c42ce5373405ca93946311652c51ccfeb1c2d913","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}