U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2026-68479 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbt_parse_firmware() copies patch_length - 4 bytes before appending the firmware version. A malformed firmware patch shorter than the version field can make this subtraction underflow and turn the copy into an oversized read and write during Bluetooth setup. The existing patch_offset + patch_length check can also wrap on 32-bit architectures. Validate the patch length and range without arithmetic overflow before allocating or copying the patch.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/39e01b4addfbbe177567d6ed1dfb81f9cccb19e6 kernel.org
https://git.kernel.org/stable/c/609c5b04a28dc1b0f3af6a7bc93055135b2d2059 kernel.org
https://git.kernel.org/stable/c/6744ab60dfac55d1df5733960aad5be300984301 kernel.org
https://git.kernel.org/stable/c/68c5a2a19987c035eb129e627e579adafb04f637 kernel.org
https://git.kernel.org/stable/c/83534891c058ed71e251135072640911670869aa kernel.org
https://git.kernel.org/stable/c/a4cb830e0b55ac76c849fd7840afb251f4c028fa kernel.org
https://git.kernel.org/stable/c/bda3c598ade6ea03884074b91e31608326684921 kernel.org
https://git.kernel.org/stable/c/f1ca750c0510bdbb504bf084d2f196ef2af92ea6 kernel.org

Weakness Enumeration

CWE-ID CWE Name Source

Change History

1 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2026-68479
NVD Published Date:
08/15/2026
NVD Last Modified:
08/15/2026
Source:
kernel.org