一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月19日

CVE-2026-98633 – In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart:

未分类
📑 文章目录

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()

When CONFIG_DEV_COREDUMP=n, hci_devcd_append() returns -EOPNOTSUPP
without freeing its skb argument. This leaks the cloned skb and also
prevents nxp_set_ind_reset() from being called to perform recovery.

Fix by guarding the hci_devcd_append(hdev, skb_clone(skb, GFP_ATOMIC))
call with IS_ENABLED(CONFIG_DEV_COREDUMP).