CVE Explorer

CVE-2026-64549

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() bpa10x_setup() sends the vendor command 0xfc0e and passes the response to bt_dev_info() and hci_set_fw_info() as a "%s" string starting at skb->data + 1, without checking the length: bt_dev_info(hdev, "%s", (char *)(skb->data + 1)); hci_set_fw_info(hdev, "%s", skb->data + 1); A device that returns a one-byte response (status only) leaves skb->data + 1 p

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ceac8be9de5e8283c79b26d858f104d3830f0b4bda541d0e62d6b56af0d0eb00

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/bluetooth/bpa10x.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.4"},{"lessThan":"4.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"less…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6947d86bcc2426a3ecc4a7a52566f8773cc76d68ee75417c72b022639f646b6f · sha256:fb0ae1f079d3794b… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/bluetooth/bpa10x.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"1813add71e386f77b3040e6c8dc9b7b3ff965a6c","status":"affected","version":"ddd68ec8f4847b460c9f580076eafe13b031a6fd","versionType":"git"},{"lessThan":"bd56c23f1f8681a2857ee924a8bd3abf87c8913b","status":"affected","version":"ddd68ec8f4847b460c9f580076eafe13b031a6fd","versionType":"git"},{"lessThan":"7a64f39ebe1bacd9004a62eceadac0b122ec3cc2","status":"affected","version":"ddd68ec8f4847b460c9…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6947d86bcc2426a3ecc4a7a52566f8773cc76d68ee75417c72b022639f646b6f · sha256:fb0ae1f079d3794b… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6947d86bcc2426a3ecc4a7a52566f8773cc76d68ee75417c72b022639f646b6f · sha256:fb0ae1f079d3794b… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6947d86bcc2426a3ecc4a7a52566f8773cc76d68ee75417c72b022639f646b6f · sha256:fb0ae1f079d3794b… · /containers/cna/affected/0

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/1813add71e386f77b3040e6c8dc9b7b3ff965a6c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6947d86bcc2426a3ecc4a7a52566f8773cc76d68ee75417c72b022639f646b6f · sha256:fb0ae1f079d3794b… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/4b4008dda1d0c6e598d7865631ad4eda63a560f0"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6947d86bcc2426a3ecc4a7a52566f8773cc76d68ee75417c72b022639f646b6f · sha256:fb0ae1f079d3794b… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/7a64f39ebe1bacd9004a62eceadac0b122ec3cc2"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6947d86bcc2426a3ecc4a7a52566f8773cc76d68ee75417c72b022639f646b6f · sha256:fb0ae1f079d3794b… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/a8e169d308775039200bb9c905c7ce420db6e8c5"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6947d86bcc2426a3ecc4a7a52566f8773cc76d68ee75417c72b022639f646b6f · sha256:fb0ae1f079d3794b… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/bd56c23f1f8681a2857ee924a8bd3abf87c8913b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6947d86bcc2426a3ecc4a7a52566f8773cc76d68ee75417c72b022639f646b6f · sha256:fb0ae1f079d3794b… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/bfc9e7be289df11e8e38c98cd78019d67fdd0bd5"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6947d86bcc2426a3ecc4a7a52566f8773cc76d68ee75417c72b022639f646b6f · sha256:fb0ae1f079d3794b… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/dd068ef044128db655f48323a4acfd5907e04903"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6947d86bcc2426a3ecc4a7a52566f8773cc76d68ee75417c72b022639f646b6f · sha256:fb0ae1f079d3794b… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/f80b4afe893dffa9fabdbf80fb4d6782b24a6793"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6947d86bcc2426a3ecc4a7a52566f8773cc76d68ee75417c72b022639f646b6f · sha256:fb0ae1f079d3794b… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer