← All Advisories
Reported from OT-Advisories.com as of

CVE-2026-68479

Last refreshed2026-10-17

Status: UPDATED  |  Advisory ID: CVE-2026-68479

Key Details

CVECVE-2026-68479
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-16
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Linux Kernel

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
LinuxLinux Kernel
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btrtl: validate firmware patch bounds

rtlbt_parse_firmware() copies patch_length - 4 bytes before appending the

firmware version. A malformed firmware patch shorter than the version field

can make this subtraction underflow and turn the copy into an oversized

read and write during Bluetooth setup.

The existing patch_offset + patch_length check can also wrap on 32-bit

architectures. Validate the patch length and range without arithmetic

overflow before allocating or copying the patch. (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-68479
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-68479

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.