CVE-2026-97907
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 When key_id from chip is zero, rtlbt_parse_firmware_v2() intentionally ignores all security headers. However, the implementation simply breaks from a switch statement and leaks uninitialized return code `rc' (if the first section is a security one) or the previous section's `rc'. Fix it by really skipping a loop with `continue'. For consistency and readability, also do the same for the default case.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 25, 2026
First seenSep 25, 2026
How to fix
Update
- Linux Linuxba96047bba4a6101267cf4f6b3057cbc58e6c554, 90f3a142b5f8596a565b8e080d18a8050be6edef, 422f6547259654bae690713614c794dd1e2c0a0b, c4249cf6e80b1bd62a6a409aaabe760fe025dac3, 83e3e515fd261600ed8491fb0a8bcdfb115c904e or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 9a24ce5e29b15c4c6b0c89c04f9df6ce14addefa ≤ v < ba96047bba4a6101267cf4f6b3057cbc58e6c554, 9a24ce5e29b15c4c6b0c89c04f9df6ce14addefa ≤ v < 90f3a142b5f8596a565b8e080d18a8050be6edef, 9a24ce5e29b15c4c6b0c89c04f9df6ce14addefa ≤ v < 422f6547259654bae690713614c794dd1e2c0a0b, 9a24ce5e29b15c4c6b0c89c04f9df6ce14addefa ≤ v < c4249cf6e80b1bd62a6a409aaabe760fe025dac3, 9a24ce5e29b15c4c6b0c89c04f9df6ce14addefa ≤ v < 83e3e515fd261600ed8491fb0a8bcdfb115c904e, 6.4 | ba96047bba4a6101267cf4f6b3057cbc58e6c554, 90f3a142b5f8596a565b8e080d18a8050be6edef, 422f6547259654bae690713614c794dd1e2c0a0b, c4249cf6e80b1bd62a6a409aaabe760fe025dac3, 83e3e515fd261600ed8491fb0a8bcdfb115c904e |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.