{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "973bb97e5aee56edddaae3d5c96877101ad509c0"
            },
            {
              "fixed": "bbc7de352f3f3864369c904aac944c7de84c6e7b"
            },
            {
              "fixed": "c42ce5373405ca93946311652c51ccfeb1c2d913"
            },
            {
              "fixed": "673f707518e8ef03306f84c512cb160971f175fe"
            },
            {
              "fixed": "40eb4b18ad167b63644c27fa67a7400ba050379a"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "4.3.0"
            },
            {
              "fixed": "6.12.113"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.56"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "7.2.10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98732.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btintel: fix buffer over-read in btintel_hw_error()\n\nThe \"Exception info %s\" print uses skb-\u003edata + 1, but the 12-byte\npayload is not guaranteed to be NUL-terminated and can be read past\nits end.\n\nBound the print with \"%.*s\" and skb-\u003elen - 1.",
  "id": "CVE-2026-98732",
  "modified": "2026-10-19T02:30:44.076949396Z",
  "published": "2026-10-18T15:47:10.364Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/40eb4b18ad167b63644c27fa67a7400ba050379a"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/673f707518e8ef03306f84c512cb160971f175fe"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/bbc7de352f3f3864369c904aac944c7de84c6e7b"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c42ce5373405ca93946311652c51ccfeb1c2d913"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98732.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98732"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "Bluetooth: btintel: fix buffer over-read in btintel_hw_error()"
}