Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perfUpgrade kernel-headersUpgrade kernel-livepatch-4.14.238-182.421Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-debuginfo | Jul 19, 2021 | May 24, 2021 |
| Centos_linux | — | Upgrade bluez-libsUpgrade bluez-cupsUpgrade bluez-libs-debuginfoUpgrade bluez-hid2hciUpgrade bluez-debugsourceUpgrade bluez-cups-debuginfoUpgrade bluez-debuginfoUpgrade bluez-obexdUpgrade bluez-obexd-debuginfoUpgrade bluez-hid2hci-debuginfoUpgrade bluez | Nov 10, 2021 | May 24, 2021 |
| Debian | — | Upgrade bluezUpgrade linux | Jun 23, 2021 | May 24, 2021 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Gentoo Linux | — | Upgrade net-wireless/bluez. | Sep 30, 2022 | May 24, 2021 |
| Oracle_linux | — | Upgrade bluez-libsUpgrade bluez-cupsUpgrade bluez-obexdUpgrade bluez-libs-develUpgrade bluezUpgrade bluez-hid2hci | Nov 24, 2021 | May 24, 2021 |
| Redhat_linux | — | Upgrade bluez-debuginfoUpgrade bluez-debugsourceUpgrade bluez-cups-debuginfoUpgrade bluez-obexd-debuginfoUpgrade bluez-hid2hciUpgrade bluez-cupsUpgrade bluez-libsUpgrade bluez-libs-debuginfoNo solution existsUpgrade bluez-libs-develUpgrade bluez-hid2hci-debuginfoUpgrade bluezUpgrade bluez-obexd | Nov 10, 2021 | May 24, 2021 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-docs | Jul 1, 2021 | May 24, 2021 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1121-azureUpgrade linux-image-4.15.0-151-generic-lpaeUpgrade linux-image-5.11.0-1014-kvmUpgrade linux-image-4.15.0-1109-snapdragonUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1092-raspi2Upgrade linux-image-5.11.0-1017-gcpUpgrade linux-image-5.11.0-1016-oracleUpgrade linux-image-5.4.0-1049-gkeUpgrade linux-image-5.4.0-1054-awsUpgrade linux-image-5.4.0-1055-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-219-genericUpgrade linux-image-azureUpgrade linux-image-5.4.0-80-generic-lpaeUpgrade linux-image-5.4.0-1041-raspiUpgrade linux-image-5.8.0-1039-gcpUpgrade linux-image-5.4.0-1021-gkeopUpgrade linux-image-4.4.0-1100-kvmUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-5.4.0-80-genericUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-4.15.0-151-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1044-kvmUpgrade linux-image-raspiUpgrade linux-image-aws-lts-20.04Upgrade libbluetooth3Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.11.0-31-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-64kUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-5.11.0-27-generic-64kUpgrade linux-image-5.11.0-1016-raspi-nolpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1109-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.11.0-31-lowlatencyUpgrade linux-image-4.4.0-1103-kvmUpgrade bluezUpgrade linux-image-awsUpgrade linux-image-5.11.0-1016-raspiUpgrade linux-image-5.11.0-1013-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-80-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-219-lowlatencyUpgrade linux-image-4.4.0-1099-awsUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-virtualUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1049-gcpUpgrade linux-image-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.11.0-27-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1097-kvmUpgrade linux-image-gcpUpgrade linux-image-4.15.0-151-genericUpgrade linux-image-oracleUpgrade linux-image-5.8.0-1038-oracleUpgrade linux-image-5.4.0-1052-oracleUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.11.0-31-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.11.0-31-genericUpgrade linux-image-gke-5.4Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1106-gcpUpgrade linux-image-4.15.0-1078-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade libbluetooth3 (Ubuntu Pro)Upgrade linux-image-gcp-lts-20.04Upgrade bluez (Ubuntu Pro)Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.11.0-27-generic-lpaeUpgrade linux-image-5.11.0-1016-awsUpgrade linux-image-5.8.0-1042-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.11.0-27-lowlatencyUpgrade linux-image-5.8.0-1040-azureUpgrade linux-image-generic-64k-hwe-20.04 | Jun 17, 2021 | May 24, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub