Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | Jul 19, 2021 | May 24, 2021 |
| Centos_linux | — | Upgrade bluez-obexdUpgrade bluezUpgrade bluez-obexd-debuginfoUpgrade bluez-hid2hci-debuginfoUpgrade bluez-cupsUpgrade bluez-debugsourceUpgrade bluez-libsUpgrade bluez-cups-debuginfoUpgrade bluez-hid2hciUpgrade bluez-debuginfoUpgrade bluez-libs-debuginfo | Nov 10, 2021 | May 24, 2021 |
| Debian | — | Upgrade linuxUpgrade bluez | Jun 23, 2021 | May 24, 2021 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Gentoo Linux | — | Upgrade net-wireless/bluez. | Sep 30, 2022 | May 24, 2021 |
| Oracle_linux | — | Upgrade bluez-cupsUpgrade bluez-libsUpgrade bluez-libs-develUpgrade bluez-obexdUpgrade bluez-hid2hciUpgrade bluez | Nov 24, 2021 | May 24, 2021 |
| Redhat_linux | — | Upgrade bluez-obexdUpgrade bluez-hid2hci-debuginfoNo solution existsUpgrade bluezUpgrade bluez-libs-debuginfoUpgrade bluez-libs-develUpgrade bluez-hid2hciUpgrade bluez-debugsourceUpgrade bluez-cupsUpgrade bluez-libsUpgrade bluez-obexd-debuginfoUpgrade bluez-cups-debuginfoUpgrade bluez-debuginfo | Nov 10, 2021 | May 24, 2021 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-default | Jul 1, 2021 | May 24, 2021 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-1016-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-151-genericUpgrade linux-image-oem-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.11.0-31-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-5.11.0-27-generic-lpaeUpgrade linux-image-5.8.0-1042-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.11.0-27-lowlatencyUpgrade libbluetooth3 (Ubuntu Pro)Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1106-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade bluezUpgrade linux-image-5.11.0-1013-azureUpgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-gkeopUpgrade linux-image-5.11.0-27-genericUpgrade linux-image-awsUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1097-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-1099-awsUpgrade linux-image-5.11.0-1016-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.8.0-1040-azureUpgrade linux-image-4.15.0-1078-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-80-lowlatencyUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.11.0-31-generic-64kUpgrade linux-image-4.4.0-219-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1052-oracleUpgrade linux-image-5.8.0-1038-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1049-gcpUpgrade bluez (Ubuntu Pro)Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.11.0-31-lowlatencyUpgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-5.8.0-1039-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-1100-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-4.15.0-151-lowlatencyUpgrade linux-image-5.11.0-27-generic-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-80-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.4.0-1044-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1109-awsUpgrade linux-image-5.11.0-1016-raspi-nolpaeUpgrade linux-image-4.15.0-1121-azureUpgrade linux-image-4.15.0-1092-raspi2Upgrade linux-image-5.4.0-1054-awsUpgrade linux-image-4.15.0-1109-snapdragonUpgrade linux-image-4.15.0-151-generic-lpaeUpgrade linux-image-5.11.0-1014-kvmUpgrade linux-image-5.11.0-1016-oracleUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1049-gkeUpgrade libbluetooth3Upgrade linux-image-5.4.0-80-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1041-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-azureUpgrade linux-image-5.4.0-1055-azureUpgrade linux-image-generic-64kUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-5.11.0-1017-gcpUpgrade linux-image-5.4.0-1021-gkeopUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.11.0-31-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-4.4.0-219-genericUpgrade linux-image-4.4.0-1138-aws | Jun 17, 2021 | May 24, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub