Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-43134

Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.252, 5.15.202, 6.1.165, 6.6.128, 6.12.75, and 2 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ This adds a check for encryption key size upon receiving L2CAP_LE_CONN_REQ which is required by L2CAP/LE/CFC/BV-15-C which expects L2CAP_CR_LE_BAD_KEY_SIZE.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d · fixed in 335071c0c3637064ec250481f589075db44fe4e6; From 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d · fixed in fa6ad76fa8623c0a50d529cd5726fa5d819a3be4; From 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d · fixed in 9118601ff90b79e8df3c0c98f48ae00c1b02ecef; From 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d · fixed in 481ea39b342c347b6ac029f3d418486280be4e45; From 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d · fixed in ec91078e132179b04e0c3906b599816c056ceaad; From 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d · fixed in 96581749c7c14fbec32c35728520867929600041; From 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d · fixed in 8dd43f9a9323f9c01bc8246da8d81a4c783c9e97; From 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d · fixed in 138d7eca445ef37a0333425d269ee59900ca1104

  • Linux Linux

    3.14

  • KernelLinux

    From 3.14.0 · fixed in 5.10.252; From 5.11.0 · fixed in 5.15.202; From 5.16.0 · fixed in 6.1.165; From 6.2.0 · fixed in 6.6.128; From 6.7.0 · fixed in 6.12.75; From 6.13.0 · fixed in 6.18.16; From 6.19.0 · fixed in 6.19.6

References 8

git.kernel.org