CVE-2026-98110 is a high-severity vulnerability in the Linux kernel's Bluetooth subsystem (btintel). The flaw arises because the firmware ID is handled as a NUL-terminated string, but its actual boundary is defined only by the TLV length. If the firmware ID lacks a NUL terminator, the snprintf() function may read beyond the intended buffer, causing an out-of-bounds read.