CVE-2026-74532: Bluetooth: btintel: Validate length before parsing diagnostics TLV
Bluetooth: btintel: Validate length before parsing diagnostics TLV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.152.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74532?
The severity of CVE-2026-74532 is rated at risk level 18.
What vulnerability does CVE-2026-74532 address?
CVE-2026-74532 addresses a flaw in the Linux kernel's Bluetooth component that lacks validation of length when parsing diagnostics TLVs.
How can I fix CVE-2026-74532?
You can fix CVE-2026-74532 by updating the Linux kernel to a version that includes the patch for this vulnerability.
What could happen if CVE-2026-74532 is exploited?
If CVE-2026-74532 is exploited, it could permit reading data beyond the allocated buffer, potentially leading to information leaks or system instability.
Is CVE-2026-74532 present in all Linux kernel versions?
CVE-2026-74532 is specific to certain versions of the Linux kernel and may not be present in all releases.