Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31497

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: clamp SCO altsetting table indices btusb_work() maps the number of active SCO links to USB alternate settings through a three-entry lookup table when CVSD traffic uses transparent voice settings. The lookup currently indexes alts[] with data->sco_num - 1 without first constraining sco_num to the number of available table entries. While the table only defines alternate settings for up to three SCO links, data
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:0197899ca7d170b7df4d2a938826f4de7f11c177b5360f72e26f4acfebf4bccb
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/bluetooth/btusb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"312c4450fe23014665c163f480edd5ad2e27bbb8","status":"affected","version":"baac6276c0a9f36f1fe1f00590ef00d2ba5ba626","versionType":"git"},{"lessThan":"9dd13a8641de79bc1bc93da55cdd35259a002683","status":"affected","version":"baac6276c0a9f36f1fe1f00590ef00d2ba5ba626","versionType":"git"},{"lessThan":"476c9262b430c38c6a701a3b8176a3f48689085b","status":"affected","version":"baac6276c0a9f36f1fe1…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8c5615db63bc66d3d8c224b0be0708220dc89be90255bb57e557f31f6878fad0 · sha256:ba0524bf1383954c… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/bluetooth/btusb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.8"},{"lessThan":"5.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"lessT…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8c5615db63bc66d3d8c224b0be0708220dc89be90255bb57e557f31f6878fad0 · sha256:ba0524bf1383954c… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/bluetooth/btusb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"312c4450fe23014665c163f480edd5ad2e27bbb8","status":"affected","version":"baac6276c0a9f36f1fe1f00590ef00d2ba5ba626","versionType":"git"},{"lessThan":"9dd13a8641de79bc1bc93da55cdd35259a002683","status":"affected","version":"baac6276c0a9f36f1fe1f00590ef00d2ba5ba626","versionType":"git"},{"lessThan":"476c9262b430c38c6a701a3b8176a3f48689085b","status":"affected","version":"baac6276c0a9f36f1fe1…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8c5615db63bc66d3d8c224b0be0708220dc89be90255bb57e557f31f6878fad0 · sha256:ba0524bf1383954c… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/bluetooth/btusb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.8"},{"lessThan":"5.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"lessT…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:8c5615db63bc66d3d8c224b0be0708220dc89be90255bb57e557f31f6878fad0 · sha256:ba0524bf1383954c… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/1019028eb124564cf7bca58a16f1df8a1ca30726"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c5615db63bc66d3d8c224b0be0708220dc89be90255bb57e557f31f6878fad0 · sha256:ba0524bf1383954c… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/129fa608b6ad08b8ab7178eeb2ec272c993aaccc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c5615db63bc66d3d8c224b0be0708220dc89be90255bb57e557f31f6878fad0 · sha256:ba0524bf1383954c… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/21c254202f9d78abe0fcd642a92966deb92bd226"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c5615db63bc66d3d8c224b0be0708220dc89be90255bb57e557f31f6878fad0 · sha256:ba0524bf1383954c… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/312c4450fe23014665c163f480edd5ad2e27bbb8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c5615db63bc66d3d8c224b0be0708220dc89be90255bb57e557f31f6878fad0 · sha256:ba0524bf1383954c… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/476c9262b430c38c6a701a3b8176a3f48689085b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c5615db63bc66d3d8c224b0be0708220dc89be90255bb57e557f31f6878fad0 · sha256:ba0524bf1383954c… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/6fba3c3d48c927e55611a0f5ea34da88138ed0ff"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c5615db63bc66d3d8c224b0be0708220dc89be90255bb57e557f31f6878fad0 · sha256:ba0524bf1383954c… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/834cf890d2c3d29cbfa1ee2376c40469c28ec297"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c5615db63bc66d3d8c224b0be0708220dc89be90255bb57e557f31f6878fad0 · sha256:ba0524bf1383954c… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/9dd13a8641de79bc1bc93da55cdd35259a002683"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:8c5615db63bc66d3d8c224b0be0708220dc89be90255bb57e557f31f6878fad0 · sha256:ba0524bf1383954c… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer