Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43017

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate mesh send advertising payload length mesh_send() currently bounds MGMT_OP_MESH_SEND by total command length, but it never verifies that the bytes supplied for the flexible adv_data[] array actually match the embedded adv_data_len field. MGMT_MESH_SEND_SIZE only covers the fixed header, so a truncated command can still pass the existing 20..50 byte range check and later drive the async mesh send path p
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:0a568ffe38e2bcc04752f1a4bbddfa44232344176a4a2ea58996d8263d47895d
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/bluetooth/mgmt.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"24fa32369cf15d8fc918bdfe94097b12e6acada0","status":"affected","version":"b338d91703fae6f6afd67f3f75caa3b8f36ddef3","versionType":"git"},{"lessThan":"244b639e6a3a8e26241e201004a3a9f764476631","status":"affected","version":"b338d91703fae6f6afd67f3f75caa3b8f36ddef3","versionType":"git"},{"lessThan":"0b706fb2294aff3adfd54653bda1b5e356ad4566","status":"affected","version":"b338d91703fae6f6afd67f3f7…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7e410539a2b1a1751bf8162900ac4fe9208f91c1a923fc2d8634817dc25123c7 · sha256:1b59dcbf04dcc0a1… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/bluetooth/mgmt.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.1"},{"lessThan":"6.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.134","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.81","versionType":"semver"},{"lessThanOrEqu…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7e410539a2b1a1751bf8162900ac4fe9208f91c1a923fc2d8634817dc25123c7 · sha256:1b59dcbf04dcc0a1… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/bluetooth/mgmt.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"24fa32369cf15d8fc918bdfe94097b12e6acada0","status":"affected","version":"b338d91703fae6f6afd67f3f75caa3b8f36ddef3","versionType":"git"},{"lessThan":"244b639e6a3a8e26241e201004a3a9f764476631","status":"affected","version":"b338d91703fae6f6afd67f3f75caa3b8f36ddef3","versionType":"git"},{"lessThan":"0b706fb2294aff3adfd54653bda1b5e356ad4566","status":"affected","version":"b338d91703fae6f6afd67f3f7…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7e410539a2b1a1751bf8162900ac4fe9208f91c1a923fc2d8634817dc25123c7 · sha256:1b59dcbf04dcc0a1… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/bluetooth/mgmt.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.1"},{"lessThan":"6.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.134","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.81","versionType":"semver"},{"lessThanOrEqu…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:7e410539a2b1a1751bf8162900ac4fe9208f91c1a923fc2d8634817dc25123c7 · sha256:1b59dcbf04dcc0a1… · /containers/cna/affected/1

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/0b706fb2294aff3adfd54653bda1b5e356ad4566"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7e410539a2b1a1751bf8162900ac4fe9208f91c1a923fc2d8634817dc25123c7 · sha256:1b59dcbf04dcc0a1… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/244b639e6a3a8e26241e201004a3a9f764476631"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7e410539a2b1a1751bf8162900ac4fe9208f91c1a923fc2d8634817dc25123c7 · sha256:1b59dcbf04dcc0a1… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/24fa32369cf15d8fc918bdfe94097b12e6acada0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7e410539a2b1a1751bf8162900ac4fe9208f91c1a923fc2d8634817dc25123c7 · sha256:1b59dcbf04dcc0a1… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/562ed1954f0c1bff3422b7b752bd3dacf185edbf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7e410539a2b1a1751bf8162900ac4fe9208f91c1a923fc2d8634817dc25123c7 · sha256:1b59dcbf04dcc0a1… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/bda93eec78cdbfe5cda00785cefebd443e56b88b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7e410539a2b1a1751bf8162900ac4fe9208f91c1a923fc2d8634817dc25123c7 · sha256:1b59dcbf04dcc0a1… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/edb5898cfa91afe7e8f83eda18d93034c953d632"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:7e410539a2b1a1751bf8162900ac4fe9208f91c1a923fc2d8634817dc25123c7 · sha256:1b59dcbf04dcc0a1… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer