Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix TX descriptor bounds check btintel_pcie_prepare_tx() uses tfd_index to access the TFD and data buffer arrays before the index is advanced modulo txq->count. An index equal to txq->count is one past the end of both arrays, so reject it in the bounds check.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🔴 Linux kernel: out-of-bounds access in btintel_pcie Bluetooth driver (CVE-2026-99094) An attacker may be able to access kernel memory past the end of Bluetooth transmit buffers. Disclosed Oct 26 Patch → 6.12.113, 6.18.57 and more https://cve.now/CVE-2026-99094?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=critical