CVE-2026-74532: Bluetooth: btintel: Validate length before parsing diagnostics TLV
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btintel: Validate length before parsing diagnostics TLV
btinteldiagnostics() accesses tlv->val[0] without first validating that the diagnostics VSE is long enough to contain that field, so may cause reading data beyond the received frame.
Fix by validating the length before access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74532?
The severity of CVE-2026-74532 is rated at risk level 18.
What vulnerability does CVE-2026-74532 address?
CVE-2026-74532 addresses a flaw in the Linux kernel's Bluetooth component that lacks validation of length when parsing diagnostics TLVs.
How can I fix CVE-2026-74532?
You can fix CVE-2026-74532 by updating the Linux kernel to a version that includes the patch for this vulnerability.
What could happen if CVE-2026-74532 is exploited?
If CVE-2026-74532 is exploited, it could permit reading data beyond the allocated buffer, potentially leading to information leaks or system instability.
Is CVE-2026-74532 present in all Linux kernel versions?
CVE-2026-74532 is specific to certain versions of the Linux kernel and may not be present in all releases.