CVE-2026-80763

A flaw was found in the Linux kernel's Bluetooth subsystem. A malicious or malfunctioning Bluetooth controller could send a specially crafted, truncated response to a command. This could lead to the kernel attempting to read beyond an allocated memory buffer, potentially causing a system crash (denial of service) or the disclosure of sensitive information.

Red Hat Product Security rates this vulnerability as having a Moderate impact because exploitation requires a compromised, malicious, or malfunctioning local Bluetooth controller communicating over the HCI interface. In typical enterprise server deployments, Bluetooth hardware is either absent or unused, which significantly reduces the attack surface. An attacker able to supply truncated HCI responses could trigger an out-of-bounds read in the kernel, resulting in a denial of service (system crash) without direct arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.