NetSight
IP …
high8.1

CVE-2026-43134

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ This adds a check for en…

Impact

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ This adds a check for encryption key size upon receiving L2CAP_LE_CONN_REQ which is required by L2CAP/LE/CFC/BV-15-C which expects L2CAP_CR_LE_BAD_KEY_SIZE.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.14 before 5.10.252
from 5.11 before 5.15.202
from 5.16 before 6.1.165
from 6.2 before 6.6.128
from 6.7 before 6.12.75
from 6.13 before 6.18.16

Weakness classification

CWE-326

References