CVE-2026-97907

CVE-2026-97907

published September 25, 2026

CVSS
—
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btrtl: Don't leak return code when parsing firmware format v2

When key_id from chip is zero, rtlbt_parse_firmware_v2() intentionally

ignores all security headers. However, the implementation simply breaks

from a switch statement and leaks uninitialized return code `rc' (if the

first section is a security one) or the previous section's `rc'.

Fix it by really skipping a loop with `continue'. For consistency and

readability, also do the same for the default case.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.3th percentile
Published
2026-09-25T15:17Z
References (5)
EPSS history
Timeline
  • 27 SEP 03:28Z
    EPSS moved — → 0%
    epss
  • 25 SEP 10:22Z
    Bluetooth: btrtl: Don't leak return code when parsing firmware format v2
    cvelistv5