Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.238-182.421Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel | Jul 19, 2021 | May 24, 2021 |
| Centos_linux | — | Upgrade bluez-cupsUpgrade bluez-debuginfoUpgrade bluez-libs-debuginfoUpgrade bluez-debugsourceUpgrade bluez-libsUpgrade bluez-hid2hciUpgrade bluez-cups-debuginfoUpgrade bluezUpgrade bluez-obexd-debuginfoUpgrade bluez-obexdUpgrade bluez-hid2hci-debuginfo | Nov 10, 2021 | May 24, 2021 |
| Debian | — | Upgrade bluezUpgrade linux | Jun 23, 2021 | May 24, 2021 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Gentoo Linux | — | Upgrade net-wireless/bluez. | Sep 30, 2022 | May 24, 2021 |
| Oracle_linux | — | Upgrade bluezUpgrade bluez-obexdUpgrade bluez-hid2hciUpgrade bluez-libs-develUpgrade bluez-libsUpgrade bluez-cups | Nov 24, 2021 | May 24, 2021 |
| Redhat_linux | — | Upgrade bluez-libsUpgrade bluez-cups-debuginfoUpgrade bluez-debuginfoUpgrade bluez-obexd-debuginfoUpgrade bluez-hid2hciUpgrade bluez-debugsourceUpgrade bluez-cupsUpgrade bluezUpgrade bluez-hid2hci-debuginfoUpgrade bluez-libs-develUpgrade bluez-libs-debuginfoNo solution existsUpgrade bluez-obexd | Nov 10, 2021 | May 24, 2021 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-build | Jul 1, 2021 | May 24, 2021 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1109-snapdragonUpgrade linux-image-azureUpgrade linux-image-4.15.0-1092-raspi2Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1054-awsUpgrade linux-image-4.15.0-1121-azureUpgrade linux-image-4.15.0-151-generic-lpaeUpgrade linux-image-5.4.0-1055-azureUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-5.11.0-1014-kvmUpgrade linux-image-5.11.0-31-generic-lpaeUpgrade linux-image-5.4.0-1041-raspiUpgrade linux-image-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-219-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-snapdragonUpgrade linux-image-aws-hweUpgrade linux-image-5.11.0-1016-raspi-nolpaeUpgrade linux-image-4.4.0-1100-kvmUpgrade linux-image-4.15.0-151-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade libbluetooth3Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1138-awsUpgrade linux-image-5.11.0-1016-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-80-generic-lpaeUpgrade linux-image-5.8.0-1039-gcpUpgrade linux-image-5.4.0-1021-gkeopUpgrade linux-image-5.4.0-80-genericUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1049-gkeUpgrade linux-image-5.11.0-27-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.11.0-1017-gcpUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.4.0-1044-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspiUpgrade linux-image-4.15.0-1109-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade bluez (Ubuntu Pro)Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeopUpgrade libbluetooth3 (Ubuntu Pro)Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.11.0-27-genericUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1099-awsUpgrade linux-image-5.11.0-1013-azureUpgrade linux-image-5.11.0-1016-raspiUpgrade linux-image-oracleUpgrade bluezUpgrade linux-image-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.11.0-31-generic-64kUpgrade linux-image-5.4.0-80-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1106-gcpUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-219-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-5.11.0-31-lowlatencyUpgrade linux-image-5.11.0-27-lowlatencyUpgrade linux-image-5.8.0-1038-oracleUpgrade linux-image-4.15.0-1097-kvmUpgrade linux-image-5.4.0-1052-oracleUpgrade linux-image-gke-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-5.11.0-31-genericUpgrade linux-image-5.8.0-1040-azureUpgrade linux-image-gcpUpgrade linux-image-5.11.0-27-generic-lpaeUpgrade linux-image-5.8.0-1042-awsUpgrade linux-image-4.15.0-151-genericUpgrade linux-image-5.11.0-1016-awsUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1049-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.15.0-1078-oracle | Jun 17, 2021 | May 24, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub