01 Record

CVE-2026-43020

Bluetooth: MGMT: validate LTK enc_size on load

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

Bluetooth: MGMT: validate LTK enc_size on load

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.13% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 3.0% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-01 14:15Z4 MO AGO

Last updated

2026-05-11 22:16Z3 MO AGO

Reserved

2026-05-01

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-787Out-of-bounds WriteBase
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Base

Data version

5.2

Document digest

a97f1e891c0a1fed0a081ee6903cad35eb6b7addc5489d0685cfa939e0ba22b1

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux346af67b8d116f01ef696fd47959a55deb2db8b6 to < 0f37d1e65c6d71ad94ccfb5c602163c525db789d, 346af67b8d116f01ef696fd47959a55deb2db8b6 to < 257cdb960d8ff6d60bb6461b03c814b6cf0c9e64, 346af67b8d116f01ef696fd47959a55deb2db8b6 to < c34577f517b556fb6ca173d45bf7e766ae2564ce, 346af67b8d116f01ef696fd47959a55deb2db8b6 to < f71695e81f4cb428f3c7e2138eae88199005b52c, 346af67b8d116f01ef696fd47959a55deb2db8b6 to < 82f342b3b006ca1d65f4890c05f2ec32fcb808b6, 346af67b8d116f01ef696fd47959a55deb2db8b6 to < 50fb64defa72a3fecd0af1ca7c6b47b5c5c2b257, 346af67b8d116f01ef696fd47959a55deb2db8b6 to < 40ba329e8b4cd2fb11b0caf5e6a543ceaebb6009, 346af67b8d116f01ef696fd47959a55deb2db8b6 to < b8dbe9648d69059cfe3a28917bfbf7e61efd7f15, 3.4—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/0f37d1e65c6d71ad94ccfb5c602163c525db789d
git.kernel.orghttps://git.kernel.org/stable/c/257cdb960d8ff6d60bb6461b03c814b6cf0c9e64
git.kernel.orghttps://git.kernel.org/stable/c/c34577f517b556fb6ca173d45bf7e766ae2564ce
git.kernel.orghttps://git.kernel.org/stable/c/f71695e81f4cb428f3c7e2138eae88199005b52c
git.kernel.orghttps://git.kernel.org/stable/c/82f342b3b006ca1d65f4890c05f2ec32fcb808b6
git.kernel.orghttps://git.kernel.org/stable/c/50fb64defa72a3fecd0af1ca7c6b47b5c5c2b257
git.kernel.orghttps://git.kernel.org/stable/c/40ba329e8b4cd2fb11b0caf5e6a543ceaebb6009
git.kernel.orghttps://git.kernel.org/stable/c/b8dbe9648d69059cfe3a28917bfbf7e61efd7f15

01 Record index

CVE-2026-43020

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-43020

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References