CVE-2026-80759
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_aml: validate firmware segment lengths aml_download_firmware() reads two lengths from the firmware header and uses them to build pointers before checking that the header and segment data are present. A truncated or inconsistent firmware image can make the driver read past firmware->data while constructing TCI commands. Reject images shorter than the header and ensure that the ICCM and DCCM ranges fit within the loaded firmware before downloading either segment.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 4, 2026
First seenSep 4, 2026
How to fix
Update
- Linux Linux7733b01ed13685773ccda91035a46f87d4cfef7c, e1534d49a7b8ba728e84b020f6d802aa1cb759d9, 6c70253462902d835e843b470f74aa816d60af80, 2763b8bcb504e30ec955474f51b99ce42fc62f3b, 2bf6b9baca9372ea51b6d0f2820dc9bf29a83ef4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 37bac77e4649e8158698a60addc22ec4faf5649a ≤ v < 7733b01ed13685773ccda91035a46f87d4cfef7c, 37bac77e4649e8158698a60addc22ec4faf5649a ≤ v < e1534d49a7b8ba728e84b020f6d802aa1cb759d9, 37bac77e4649e8158698a60addc22ec4faf5649a ≤ v < 6c70253462902d835e843b470f74aa816d60af80, 37bac77e4649e8158698a60addc22ec4faf5649a ≤ v < 2763b8bcb504e30ec955474f51b99ce42fc62f3b, 37bac77e4649e8158698a60addc22ec4faf5649a ≤ v < 2bf6b9baca9372ea51b6d0f2820dc9bf29a83ef4, 6.12 | 7733b01ed13685773ccda91035a46f87d4cfef7c, e1534d49a7b8ba728e84b020f6d802aa1cb759d9, 6c70253462902d835e843b470f74aa816d60af80, 2763b8bcb504e30ec955474f51b99ce42fc62f3b, 2bf6b9baca9372ea51b6d0f2820dc9bf29a83ef4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.