Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernelUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.238-182.421Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perfUpgrade python-perf-debuginfo | Jul 19, 2021 | May 24, 2021 |
| Centos_linux | — | Upgrade bluez-obexd-debuginfoUpgrade bluez-obexdUpgrade bluezUpgrade bluez-hid2hci-debuginfoUpgrade bluez-debugsourceUpgrade bluez-libs-debuginfoUpgrade bluez-hid2hciUpgrade bluez-libsUpgrade bluez-cups-debuginfoUpgrade bluez-debuginfoUpgrade bluez-cups | Nov 10, 2021 | May 24, 2021 |
| Debian | — | Upgrade linuxUpgrade bluez | Jun 23, 2021 | May 24, 2021 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Gentoo Linux | — | Upgrade net-wireless/bluez. | Sep 30, 2022 | May 24, 2021 |
| Oracle_linux | — | Upgrade bluez-libsUpgrade bluez-cupsUpgrade bluez-libs-develUpgrade bluez-obexdUpgrade bluezUpgrade bluez-hid2hci | Nov 24, 2021 | May 24, 2021 |
| Redhat_linux | — | Upgrade bluez-debuginfoUpgrade bluez-cups-debuginfoUpgrade bluez-hid2hciUpgrade bluez-libsUpgrade bluez-cupsUpgrade bluez-obexd-debuginfoUpgrade bluez-debugsourceUpgrade bluez-hid2hci-debuginfoNo solution existsUpgrade bluezUpgrade bluez-obexdUpgrade bluez-libs-develUpgrade bluez-libs-debuginfo | Nov 10, 2021 | May 24, 2021 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-build | Jul 1, 2021 | May 24, 2021 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1052-oracleUpgrade linux-image-5.11.0-31-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1097-kvmUpgrade linux-image-awsUpgrade linux-image-4.15.0-151-genericUpgrade linux-image-5.11.0-31-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-4.4.0-1135-awsUpgrade bluezUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.11.0-27-lowlatencyUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-5.8.0-1042-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.11.0-27-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1106-gcpUpgrade linux-image-5.11.0-1016-raspiUpgrade linux-image-5.4.0-80-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-219-lowlatencyUpgrade linux-image-gke-5.4Upgrade linux-image-5.8.0-1038-oracleUpgrade linux-image-4.4.0-1099-awsUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.11.0-1016-awsUpgrade linux-image-5.11.0-31-lowlatencyUpgrade linux-image-5.11.0-27-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.8.0-1040-azureUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1078-oracleUpgrade linux-image-5.11.0-1013-azureUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1049-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade bluez (Ubuntu Pro)Upgrade libbluetooth3 (Ubuntu Pro)Upgrade linux-image-5.8.0-1039-gcpUpgrade linux-image-aws-lts-20.04Upgrade libbluetooth3Upgrade linux-image-4.4.0-1102-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-1017-gcpUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-4.15.0-1109-snapdragonUpgrade linux-image-4.15.0-151-lowlatencyUpgrade linux-image-5.4.0-1041-raspiUpgrade linux-image-4.4.0-219-genericUpgrade linux-image-4.4.0-1100-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-5.11.0-31-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1109-awsUpgrade linux-image-5.4.0-80-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-222-genericUpgrade linux-image-5.4.0-80-genericUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.11.0-1016-raspi-nolpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-oemUpgrade linux-image-generic-64kUpgrade linux-image-5.11.0-1016-oracleUpgrade linux-image-4.15.0-1121-azureUpgrade linux-image-azureUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-5.4.0-1044-kvmUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-5.11.0-27-generic-64kUpgrade linux-image-5.4.0-1049-gkeUpgrade linux-image-4.15.0-1092-raspi2Upgrade linux-image-5.4.0-1054-awsUpgrade linux-image-5.4.0-1021-gkeopUpgrade linux-image-4.15.0-151-generic-lpaeUpgrade linux-image-5.4.0-1055-azureUpgrade linux-image-5.11.0-1014-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04 | Jun 17, 2021 | May 24, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub