CVE-2026-68479

High

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbt_parse_firmware() copies patch_length - 4 bytes before appending the firmware version. A malformed firmware patch shorter than the version field can make this subtraction underflow and turn the copy into an oversized read and write during Bluetooth setup. The existing patch_offset + patch_length check can also wrap on 32-bit architectures. Validate the patch length and range without arithmetic overflow before allocating or copying the patch.

SeverityHigh

CVSS7.8

Exploit probability—

Product

Linux

PublishedAug 15, 2026

First seenAug 15, 2026

Weakness typeCWE-190Integer overflow

How to fix

Update

Linux Linux39e01b4addfbbe177567d6ed1dfb81f9cccb19e6, bda3c598ade6ea03884074b91e31608326684921, a4cb830e0b55ac76c849fd7840afb251f4c028fa, 68c5a2a19987c035eb129e627e579adafb04f637, 83534891c058ed71e251135072640911670869aa, 6744ab60dfac55d1df5733960aad5be300984301, f1ca750c0510bdbb504bf084d2f196ef2af92ea6, 609c5b04a28dc1b0f3af6a7bc93055135b2d2059 or later

Affected products

Product	Affected versions	Fixed in
Linux Linux	db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 ≤ v < 39e01b4addfbbe177567d6ed1dfb81f9cccb19e6, db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 ≤ v < bda3c598ade6ea03884074b91e31608326684921, db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 ≤ v < a4cb830e0b55ac76c849fd7840afb251f4c028fa, db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 ≤ v < 68c5a2a19987c035eb129e627e579adafb04f637, db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 ≤ v < 83534891c058ed71e251135072640911670869aa, db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 ≤ v < 6744ab60dfac55d1df5733960aad5be300984301, db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 ≤ v < f1ca750c0510bdbb504bf084d2f196ef2af92ea6, db33c77dddc2ed2cff3061d0b096a9f5ab0c3647 ≤ v < 609c5b04a28dc1b0f3af6a7bc93055135b2d2059, 4.2	39e01b4addfbbe177567d6ed1dfb81f9cccb19e6, bda3c598ade6ea03884074b91e31608326684921, a4cb830e0b55ac76c849fd7840afb251f4c028fa, 68c5a2a19987c035eb129e627e579adafb04f637, 83534891c058ed71e251135072640911670869aa, 6744ab60dfac55d1df5733960aad5be300984301, f1ca750c0510bdbb504bf084d2f196ef2af92ea6, 609c5b04a28dc1b0f3af6a7bc93055135b2d2059

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.