VULNERABILITY INTELLIGENCE

CVE-2026-79982

CVSS score8.8 HIGH

EPSS probability0.19%

CISA KEVNot currently listed

Published2026-10-23

Last modified2026-10-26

Description

The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/class/bt_hci.c, copies every controller-to-host HCI packet into a USB transfer buffer before enqueuing it on an endpoint. bt_hci_tx_sync_in() allocated that buffer from bt_hci_ep_pool, a fixed pool whose slots …