In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btrtl: validate firmware patch bounds
rtlbt_parse_firmware() copies patch_length - 4 bytes before appending the firmware version. A malformed firmware patch shorter than the version field can make this subtraction underflow and turn the copy into an oversized read and write during Bluetooth setup.
The existing patch_offset + patch_length check can also wrap on 32-bit architectures. Validate the patch length and range without arithmetic overflow before allocating or copying the patch.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Aug 16, 2026 | Aug 16, 2026 |
| Redhat_linux | — | No solution exists | Aug 19, 2026 | Aug 15, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-5.15.0-195-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-5.15.0-1117-aws-fipsUpgrade linux-image-5.15.0-1112-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-7.0.0-38-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-azure-cvmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gke-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-6.8.0-1067-aws-fipsUpgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1071-gcp-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1117-awsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-5.15Upgrade linux-image-oem-26.04Upgrade linux-image-azure-lts-26.04Upgrade linux-image-gke-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1069-azure-fdeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-5.15.0-1123-azure-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1067-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1071-gcpUpgrade linux-image-gcp-7.0Upgrade linux-image-6.8.0-147-genericUpgrade linux-image-aws-64k-7.0Upgrade linux-image-5.15.0-1111-ibmUpgrade linux-image-azure-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1100-gkeopUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1112-nvidiaUpgrade linux-image-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-198-generic-64kUpgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-7.0.0-1014-awsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-gcp-6.8Upgrade linux-image-7.0.0-38-genericUpgrade linux-image-azure-fde-7.0Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-realtime-7.0Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.1-1062-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-147-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-6.8.0-147-fipsUpgrade linux-image-oracle-5.15Upgrade linux-image-awsUpgrade linux-image-5.15.0-198-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-198-genericUpgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-7.0.0-1015-oemUpgrade linux-image-6.8.0-147-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-oem-7.0Upgrade linux-image-5.15.0-1118-gcp-fipsUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-6.8.0-1064-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1080-xilinx-zynqmpUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-gcpUpgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-6.8.0-1067-aws-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1116-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-195-lowlatency-64kUpgrade linux-image-5.15.0-1117-aws-64kUpgrade linux-image-5.15.0-1109-kvmUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-147-generic-64kUpgrade linux-image-6.8.0-1066-gkeUpgrade linux-image-6.8.0-1036-nvidia-tegraUpgrade linux-image-5.15.0-198-fipsUpgrade linux-image-5.15.0-1122-azure-fdeUpgrade linux-image-5.15.0-1118-gcpUpgrade linux-image-5.15.0-1114-oracleUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-7.0.0-1017-azureUpgrade linux-image-6.8.0-1071-azure-fipsUpgrade linux-image-5.15.0-1113-gkeUpgrade linux-image-5.15.0-1109-intel-iot-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-7.0Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-realtime-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-generic-6.8Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1071-azureUpgrade linux-image-6.8.0-1064-oracle-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-virtual-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-oracle-7.0Upgrade linux-image-laptop-23.10Upgrade linux-image-intelUpgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-aws-64kUpgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-6.8.0-1067-awsUpgrade linux-image-6.8.0-1066-gke-64kUpgrade linux-image-5.15.0-1123-azureUpgrade linux-image-ibm-7.0Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-fde-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-generic-7.0Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1071-gcp-64kUpgrade linux-image-6.8.0-1052-gkeopUpgrade linux-image-6.8.0-1036-nvidia-tegra-rtUpgrade linux-image-5.15.0-1112-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-24.04 | Oct 6, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 25, 2026 | Aug 15, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub