CVE-2026-43134 (GCVE-0-2026-43134)

Vulnerability from cvelistv5 – Published: 2026-05-06 11:27 – Updated: 2026-08-05 12:26
VLAI
Title
Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ This adds a check for encryption key size upon receiving L2CAP_LE_CONN_REQ which is required by L2CAP/LE/CFC/BV-15-C which expects L2CAP_CR_LE_BAD_KEY_SIZE.
Severity
8.1 (High)
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d , < 335071c0c3637064ec250481f589075db44fe4e6 (git)
Affected: 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d , < fa6ad76fa8623c0a50d529cd5726fa5d819a3be4 (git)
Affected: 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d , < 9118601ff90b79e8df3c0c98f48ae00c1b02ecef (git)
Affected: 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d , < 481ea39b342c347b6ac029f3d418486280be4e45 (git)
Affected: 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d , < ec91078e132179b04e0c3906b599816c056ceaad (git)
Affected: 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d , < 96581749c7c14fbec32c35728520867929600041 (git)
Affected: 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d , < 8dd43f9a9323f9c01bc8246da8d81a4c783c9e97 (git)
Affected: 27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d , < 138d7eca445ef37a0333425d269ee59900ca1104 (git)
guessed Create a notification for this product.
Linux Linux Affected: 3.14
Unaffected: 0 , < 3.14 (semver)
Unaffected: 5.10.252 , ≤ 5.10.* (semver)
Unaffected: 5.15.202 , ≤ 5.15.* (semver)
Unaffected: 6.1.165 , ≤ 6.1.* (semver)
Unaffected: 6.6.128 , ≤ 6.6.* (semver)
Unaffected: 6.12.75 , ≤ 6.12.* (semver)
Unaffected: 6.18.16 , ≤ 6.18.* (semver)
Unaffected: 6.19.6 , ≤ 6.19.* (semver)
Unaffected: 7.0 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/l2cap_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "335071c0c3637064ec250481f589075db44fe4e6",
              "status": "affected",
              "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
              "versionType": "git"
            },
            {
              "lessThan": "fa6ad76fa8623c0a50d529cd5726fa5d819a3be4",
              "status": "affected",
              "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
              "versionType": "git"
            },
            {
              "lessThan": "9118601ff90b79e8df3c0c98f48ae00c1b02ecef",
              "status": "affected",
              "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
              "versionType": "git"
            },
            {
              "lessThan": "481ea39b342c347b6ac029f3d418486280be4e45",
              "status": "affected",
              "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
              "versionType": "git"
            },
            {
              "lessThan": "ec91078e132179b04e0c3906b599816c056ceaad",
              "status": "affected",
              "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
              "versionType": "git"
            },
            {
              "lessThan": "96581749c7c14fbec32c35728520867929600041",
              "status": "affected",
              "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
              "versionType": "git"
            },
            {
              "lessThan": "8dd43f9a9323f9c01bc8246da8d81a4c783c9e97",
              "status": "affected",
              "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
              "versionType": "git"
            },
            {
              "lessThan": "138d7eca445ef37a0333425d269ee59900ca1104",
              "status": "affected",
              "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/bluetooth/l2cap_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.14"
            },
            {
              "lessThan": "3.14",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.252",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.202",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.128",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.75",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.16",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.252",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.202",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.165",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.128",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.75",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.16",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.6",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "3.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ\n\nThis adds a check for encryption key size upon receiving\nL2CAP_LE_CONN_REQ which is required by L2CAP/LE/CFC/BV-15-C which\nexpects L2CAP_CR_LE_BAD_KEY_SIZE."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:A - The vulnerable request is an incoming Bluetooth LE L2CAP signaling packet from a nearby Bluetooth peer, so exploitation requires adjacent radio proximity rather than IP network or local shell access.\nAC:L - An attacker who can establish an LE link can send an L2CAP_LE_CONN_REQ with an insufficient encryption key size and reliably reach the missing check; there is no race or condition outside attacker control.\nPR:N - The attacker does not need privileges on the target system; Bluetooth pairing/encryption is a protocol precondition, not an OS privilege, and the vulnerable authorization decision is made from received peer traffic.\nUI:N - In a reasonable deployment with a listening LE L2CAP service and connectable device, exploitation is triggered by the adjacent peer\u2019s protocol messages without requiring the victim to open a file, mount anything, or perform an action.\nS:U - The issue bypasses Bluetooth/L2CAP security policy within the same kernel and host Bluetooth service security authority, with no VM, sandbox, or hardware boundary escape.\nC:H - Accepting a channel despite an insufficient encryption key can expose all data carried by a protected LE Credit Based L2CAP service; for high-impact Bluetooth deployments, that can disclose sensitive application or device-control data.\nI:H - The same security bypass can allow an adjacent peer using inadequate encryption strength to send commands or modify state over a service that should have rejected the connection, giving high integrity impact in the protected service context.\nA:N - The bug is a missing key-size enforcement check and does not indicate memory corruption, panic, deadlock, resource exhaustion, or another availability failure."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:26:10.307Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/335071c0c3637064ec250481f589075db44fe4e6"
        },
        {
          "url": "https://git.kernel.org/stable/c/fa6ad76fa8623c0a50d529cd5726fa5d819a3be4"
        },
        {
          "url": "https://git.kernel.org/stable/c/9118601ff90b79e8df3c0c98f48ae00c1b02ecef"
        },
        {
          "url": "https://git.kernel.org/stable/c/481ea39b342c347b6ac029f3d418486280be4e45"
        },
        {
          "url": "https://git.kernel.org/stable/c/ec91078e132179b04e0c3906b599816c056ceaad"
        },
        {
          "url": "https://git.kernel.org/stable/c/96581749c7c14fbec32c35728520867929600041"
        },
        {
          "url": "https://git.kernel.org/stable/c/8dd43f9a9323f9c01bc8246da8d81a4c783c9e97"
        },
        {
          "url": "https://git.kernel.org/stable/c/138d7eca445ef37a0333425d269ee59900ca1104"
        }
      ],
      "title": "Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43134",
    "datePublished": "2026-05-06T11:27:21.541Z",
    "dateReserved": "2026-05-01T14:12:55.988Z",
    "dateUpdated": "2026-08-05T12:26:10.307Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-43134",
      "date": "2026-09-21",
      "epss": "0.00177",
      "percentile": "0.07439"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "net/bluetooth/l2cap_core.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "335071c0c3637064ec250481f589075db44fe4e6",
                    "status": "affected",
                    "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "fa6ad76fa8623c0a50d529cd5726fa5d819a3be4",
                    "status": "affected",
                    "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "9118601ff90b79e8df3c0c98f48ae00c1b02ecef",
                    "status": "affected",
                    "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "481ea39b342c347b6ac029f3d418486280be4e45",
                    "status": "affected",
                    "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "ec91078e132179b04e0c3906b599816c056ceaad",
                    "status": "affected",
                    "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "96581749c7c14fbec32c35728520867929600041",
                    "status": "affected",
                    "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "8dd43f9a9323f9c01bc8246da8d81a4c783c9e97",
                    "status": "affected",
                    "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "138d7eca445ef37a0333425d269ee59900ca1104",
                    "status": "affected",
                    "version": "27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "net/bluetooth/l2cap_core.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "3.14"
                  },
                  {
                    "lessThan": "3.14",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.252",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.202",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.165",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.128",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.75",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.16",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.19.*",
                    "status": "unaffected",
                    "version": "6.19.6",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.0",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "220A1B84-28FD-4537-8887-03669AE354D2",
                    "versionEndExcluding": "5.10.252",
                    "versionStartIncluding": "3.14",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4002FC2B-1456-4666-B240-0EBF590C4671",
                    "versionEndExcluding": "5.15.202",
                    "versionStartIncluding": "5.11",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "797C7F46-D0BE-4FB8-A502-C5EF8E6B6654",
                    "versionEndExcluding": "6.1.165",
                    "versionStartIncluding": "5.16",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "851E9353-6C09-4CC9-877E-E09DB164A3C2",
                    "versionEndExcluding": "6.6.128",
                    "versionStartIncluding": "6.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BCE16369-98ED-41CF-8995-DFDC10B288D2",
                    "versionEndExcluding": "6.12.75",
                    "versionStartIncluding": "6.7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B4B8CDA9-BADF-4CF5-8B3B-702DE8EEA40B",
                    "versionEndExcluding": "6.18.16",
                    "versionStartIncluding": "6.13",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67",
                    "versionEndExcluding": "6.19.6",
                    "versionStartIncluding": "6.19",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "F253B622-8837-4245-BCE5-A7BF8FC76A16",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ\n\nThis adds a check for encryption key size upon receiving\nL2CAP_LE_CONN_REQ which is required by L2CAP/LE/CFC/BV-15-C which\nexpects L2CAP_CR_LE_BAD_KEY_SIZE."
          }
        ],
        "id": "CVE-2026-43134",
        "lastModified": "2026-06-17T10:48:59.953",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "ADJACENT_NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 8.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 5.2,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-05-06T12:16:30.617",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/138d7eca445ef37a0333425d269ee59900ca1104"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/335071c0c3637064ec250481f589075db44fe4e6"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/481ea39b342c347b6ac029f3d418486280be4e45"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/8dd43f9a9323f9c01bc8246da8d81a4c783c9e97"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/9118601ff90b79e8df3c0c98f48ae00c1b02ecef"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/96581749c7c14fbec32c35728520867929600041"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/ec91078e132179b04e0c3906b599816c056ceaad"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/fa6ad76fa8623c0a50d529cd5726fa5d819a3be4"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-noinfo"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-02T12:50:13+00:00",
      "cve": "CVE-2026-43134",
      "id": "CVE-2026-43134",
      "initial_release_date": "2026-05-06T00:00:00+00:00",
      "product_status:known_affected": "232",
      "product_status:known_not_affected": "42",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43134.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T01:20:37Z",
      "cve": "CVE-2026-43134",
      "id": "CVE-2026-43134",
      "initial_release_date": "2026-05-07T02:17:52Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "699",
      "product_status:known_not_affected": "21",
      "product_status:recommended": "250",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-43134",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-43134.json",
      "version": "9"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.