Security Advisory

CVE-2026-74532

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-15 12:27:46
Last updated 2026-08-17 05:21:15
Assigner Linux
CVSS score not scored
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing diagnostics TLV btintel_diagnostics() accesses tlv->val[0] without first validating that the diagnostics VSE is long enough to contain that field, so may cause reading data beyond the received frame. Fix by validating the length before access.