CVE-2026-98633
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() When CONFIG_DEV_COREDUMP=n, hci_devcd_append() returns -EOPNOTSUPP without freeing its skb argument. This leaks the cloned skb and also prevents nxp_set_ind_reset() from being called to perform recovery. Fix by guarding the hci_devcd_append(hdev, skb_clone(skb, GFP_ATOMIC)) call with IS_ENABLED(CONFIG_DEV_COREDUMP).
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedOct 18, 2026
First seenOct 18, 2026
How to fix
Update
- Linux Linux8a36598050cd1e5abb1d5ed42cc224cfcb538c4f, edcb84ee607a9ddfc6f2771a7f399115f0b0f19d, f2bbb36426581045a8bf7793da5419b9375e4348 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 998e447f443f138c90faa6ff3845082af419070e ≤ v < 8a36598050cd1e5abb1d5ed42cc224cfcb538c4f, 998e447f443f138c90faa6ff3845082af419070e ≤ v < edcb84ee607a9ddfc6f2771a7f399115f0b0f19d, 998e447f443f138c90faa6ff3845082af419070e ≤ v < f2bbb36426581045a8bf7793da5419b9375e4348, 6.15 | 8a36598050cd1e5abb1d5ed42cc224cfcb538c4f, edcb84ee607a9ddfc6f2771a7f399115f0b0f19d, f2bbb36426581045a8bf7793da5419b9375e4348 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.