Wind River Support Network

HomeDefectsLIN1022-34444

Fixed

LIN1022-34444 : Security Advisory - linux - CVE-2026-98110

Created: Sep 25, 2026 Updated: Sep 29, 2026

Resolved Date: Sep 26, 2026

Found In Version: 10.22.33.2

Fix Version: 10.22.33.11

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: btintel: bound firmware ID by TLV length  The firmware ID is treated as a NUL-terminated string even though the TLV length is its only boundary. If the value does not contain a NUL terminator, snprintf() can read beyond the received response.  Limit the conversion to the advertised TLV value length.
Data source: kernel.org (416baaa9-dc9f-4396-8d5f-8c081fb06d67)

CVEs

CVE-2026-98110