CVE-2026-74300

A flaw was found in the Linux kernel's Bluetooth Host Controller Interface (HCI) component. A malicious Bluetooth controller could send a specially crafted response during the 'Read Local Codec Capabilities' operation. Insufficient validation of the codec capability element length could allow the system to write one byte beyond the intended memory buffer. This out-of-bounds write could lead to memory corruption within the kernel.

This vulnerability is rated as Moderate impact because triggering the issue requires an untrusted or compromised Bluetooth adapter providing malformed payload elements during device initialization. In standard Red Hat Enterprise Linux server environments, Bluetooth hardware is typically absent or disabled, which substantially restricts real-world exposure. Furthermore, the resulting single-byte out-of-bounds copy primarily threatens kernel stability and system availability rather than broader compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.