An out-of-bounds read vulnerability in the Linux kernel Wacom Bluetooth driver affects multiple kernel versions and exposes systems to potential information disclosure and denial of service risks.

This flaw is an out-of-bounds read within the wacom_intuos_bt_irq function, triggered when processing malformed Bluetooth HID reports lacking sufficient bounds checking, requiring no authentication by an adjacent attacker.

Successful exploitation of this flaw can lead to kernel memory disclosure or system crashes, resulting in unexpected service downtime. The CVSS score of 8.1 reflects the high severity of potential impacts, particularly concerning confidentiality and availability on systems utilizing Bluetooth peripherals.

Immediate Action: Update the Linux kernel to version 5.10.253, 5.15.203, 6.1.168, 6.6.134, or later depending on the active release branch.

Proactive Monitoring: Monitor system kernel logs for unusual warnings or faults related to Bluetooth HID driver events and device disconnects.

Compensating Controls: Restrict physical and wireless proximity access where Bluetooth connectivity is not required for production operations.

Public Exploit Available: exploit_available (false / unknown)

Given the high CVSS score and the critical nature of kernel components, administrators must prioritize applying upstream kernel patches or distribution-specific updates immediately. Securing the kernel environment prevents potential adjacent network attacks from compromising system stability.