bluetooth btusb

  1. CVE-2026-31497: btusb SCO Altsetting Out-of-Bounds Fix in Linux Bluetooth

    CVE-2026-31497 is a small Linux kernel Bluetooth bug with outsized meaning for maintainers and downstream vendors. The issue sits in the btusb driver, where the kernel maps the number of active SCO links to USB alternate settings through a fixed lookup table, but failed to clamp the index before...
  2. CVE-2026-31497: Linux btusb SCO Alternate Settings Array-Bounds Fix Explained

    CVE-2026-31497 is another reminder that the most interesting Linux kernel bugs are often the quiet ones. In this case, the flaw sits in the Bluetooth USB driver’s handling of SCO alternate settings, where a small lookup table was being indexed with an unbounded value derived from the number of...