Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.
CVSS Details
- CVSS 3.1 Base Score: 4.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-tools-develUpgrade perfUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headers | Jul 19, 2021 | May 24, 2021 |
| Centos_linux | — | Upgrade bluez-hid2hciUpgrade bluez-cupsUpgrade bluez-cups-debuginfoUpgrade bluez-debuginfoUpgrade bluez-libsUpgrade bluez-debugsourceUpgrade bluez-libs-debuginfoUpgrade bluezUpgrade bluez-hid2hci-debuginfoUpgrade bluez-obexdUpgrade bluez-obexd-debuginfo | Nov 10, 2021 | May 24, 2021 |
| Debian | — | Upgrade bluezUpgrade linux | Jun 23, 2021 | May 24, 2021 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Gentoo Linux | — | Upgrade net-wireless/bluez. | Sep 30, 2022 | May 24, 2021 |
| Oracle_linux | — | Upgrade bluezUpgrade bluez-obexdUpgrade bluez-libs-develUpgrade bluez-hid2hciUpgrade bluez-libsUpgrade bluez-cups | Nov 24, 2021 | May 24, 2021 |
| Redhat_linux | — | Upgrade bluezUpgrade bluez-obexdUpgrade bluez-libs-debuginfoUpgrade bluez-libs-develUpgrade bluez-hid2hci-debuginfoNo solution existsUpgrade bluez-debuginfoUpgrade bluez-cupsUpgrade bluez-debugsourceUpgrade bluez-obexd-debuginfoUpgrade bluez-hid2hciUpgrade bluez-cups-debuginfoUpgrade bluez-libs | Nov 10, 2021 | May 24, 2021 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-default | Jul 1, 2021 | May 24, 2021 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-151-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.11.0-27-generic-64kUpgrade linux-image-4.15.0-1109-awsUpgrade linux-image-5.8.0-1039-gcpUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1021-gkeopUpgrade linux-image-4.15.0-1092-raspi2Upgrade linux-image-4.4.0-1138-awsUpgrade linux-image-5.11.0-31-generic-lpaeUpgrade linux-image-5.4.0-80-genericUpgrade linux-image-4.15.0-1121-azureUpgrade linux-image-4.15.0-151-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.11.0-1016-oracleUpgrade linux-image-5.11.0-1014-kvmUpgrade linux-image-4.15.0-1109-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.11.0-1016-raspi-nolpaeUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-5.4.0-1054-awsUpgrade linux-image-azureUpgrade linux-image-5.4.0-1055-azureUpgrade linux-image-5.11.0-1017-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1049-gkeUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1041-raspiUpgrade libbluetooth3Upgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-222-genericUpgrade linux-image-5.4.0-80-generic-lpaeUpgrade linux-image-4.4.0-219-genericUpgrade linux-image-oemUpgrade linux-image-4.4.0-1100-kvmUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1044-kvmUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.8.0-1040-azureUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-5.8.0-1038-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1097-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-151-genericUpgrade linux-image-genericUpgrade linux-image-5.11.0-31-lowlatencyUpgrade linux-image-5.4.0-80-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-18.04Upgrade libbluetooth3 (Ubuntu Pro)Upgrade bluez (Ubuntu Pro)Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1078-oracleUpgrade linux-image-5.11.0-1016-awsUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.11.0-1013-azureUpgrade linux-image-5.4.0-1049-gcpUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-5.11.0-1016-raspiUpgrade linux-image-4.4.0-1099-awsUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.11.0-27-genericUpgrade linux-image-4.15.0-1106-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1052-oracleUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-5.11.0-27-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-219-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.11.0-31-generic-64kUpgrade linux-image-5.11.0-27-lowlatencyUpgrade linux-image-5.11.0-31-genericUpgrade linux-image-5.8.0-1042-awsUpgrade linux-image-gke-5.4Upgrade bluezUpgrade linux-image-oem-20.04 | Jun 17, 2021 | May 24, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub