Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43134

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ This adds a check for encryption key size upon receiving L2CAP_LE_CONN_REQ which is required by L2CAP/LE/CFC/BV-15-C which expects L2CAP_CR_LE_BAD_KEY_SIZE.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:4e7a0d9d25987ee9d74db65c38260b7b0618f52e0945f375cf47ba304d985091
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/bluetooth/l2cap_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"335071c0c3637064ec250481f589075db44fe4e6","status":"affected","version":"27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d","versionType":"git"},{"lessThan":"fa6ad76fa8623c0a50d529cd5726fa5d819a3be4","status":"affected","version":"27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d","versionType":"git"},{"lessThan":"9118601ff90b79e8df3c0c98f48ae00c1b02ecef","status":"affected","version":"27e2d4c8d28be1d1b4e…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:62737c2749f6bc7d9f02c5b7ae1966bb526ce26c3ccd8e39bf06cd7f295d03b2 · sha256:d1ba484619c24f15… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/bluetooth/l2cap_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.14"},{"lessThan":"3.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"le…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:62737c2749f6bc7d9f02c5b7ae1966bb526ce26c3ccd8e39bf06cd7f295d03b2 · sha256:d1ba484619c24f15… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/bluetooth/l2cap_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"335071c0c3637064ec250481f589075db44fe4e6","status":"affected","version":"27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d","versionType":"git"},{"lessThan":"fa6ad76fa8623c0a50d529cd5726fa5d819a3be4","status":"affected","version":"27e2d4c8d28be1d1b4ecfbffab572d7dbd35254d","versionType":"git"},{"lessThan":"9118601ff90b79e8df3c0c98f48ae00c1b02ecef","status":"affected","version":"27e2d4c8d28be1d1b4e…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:62737c2749f6bc7d9f02c5b7ae1966bb526ce26c3ccd8e39bf06cd7f295d03b2 · sha256:d1ba484619c24f15… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/bluetooth/l2cap_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.14"},{"lessThan":"3.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"le…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:62737c2749f6bc7d9f02c5b7ae1966bb526ce26c3ccd8e39bf06cd7f295d03b2 · sha256:d1ba484619c24f15… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":8.1,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:62737c2749f6bc7d9f02c5b7ae1966bb526ce26c3ccd8e39bf06cd7f295d03b2 · sha256:d1ba484619c24f15… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/138d7eca445ef37a0333425d269ee59900ca1104"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:62737c2749f6bc7d9f02c5b7ae1966bb526ce26c3ccd8e39bf06cd7f295d03b2 · sha256:d1ba484619c24f15… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/335071c0c3637064ec250481f589075db44fe4e6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:62737c2749f6bc7d9f02c5b7ae1966bb526ce26c3ccd8e39bf06cd7f295d03b2 · sha256:d1ba484619c24f15… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/481ea39b342c347b6ac029f3d418486280be4e45"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:62737c2749f6bc7d9f02c5b7ae1966bb526ce26c3ccd8e39bf06cd7f295d03b2 · sha256:d1ba484619c24f15… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/8dd43f9a9323f9c01bc8246da8d81a4c783c9e97"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:62737c2749f6bc7d9f02c5b7ae1966bb526ce26c3ccd8e39bf06cd7f295d03b2 · sha256:d1ba484619c24f15… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/9118601ff90b79e8df3c0c98f48ae00c1b02ecef"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:62737c2749f6bc7d9f02c5b7ae1966bb526ce26c3ccd8e39bf06cd7f295d03b2 · sha256:d1ba484619c24f15… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/96581749c7c14fbec32c35728520867929600041"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:62737c2749f6bc7d9f02c5b7ae1966bb526ce26c3ccd8e39bf06cd7f295d03b2 · sha256:d1ba484619c24f15… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/ec91078e132179b04e0c3906b599816c056ceaad"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:62737c2749f6bc7d9f02c5b7ae1966bb526ce26c3ccd8e39bf06cd7f295d03b2 · sha256:d1ba484619c24f15… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/fa6ad76fa8623c0a50d529cd5726fa5d819a3be4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:62737c2749f6bc7d9f02c5b7ae1966bb526ce26c3ccd8e39bf06cd7f295d03b2 · sha256:d1ba484619c24f15… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer