Security readout for executives and security teams
Plain-English summary
CVE-2026-43334 is a Linux kernel Bluetooth pairing flaw. A nearby attacker could potentially influence pairing so a device requiring man-in-the-middle protection responds without consistently enforcing it. This matters most for Linux systems with Bluetooth enabled and security-sensitive pairing workflows. The CVSS score is high, but sources do not show active exploitation.
Executive priority
Treat as a high-priority kernel update for Bluetooth-enabled Linux fleets. Business urgency is highest for mobile, embedded, or customer-facing devices that pair with peripherals. It is not currently evidenced as internet-exploitable or actively exploited.
Technical view
The issue is in Linux Bluetooth SMP pairing response handling. smp_cmd_pairing_req() built the response from the initiator auth_req before enforcing local BT_SECURITY_HIGH MITM requirements. If MITM was omitted by the initiator, later tk_request() method selection could choose JUST_CFM, misaligning responder policy and authentication bits.
Likely exposure
Exposure is limited to adjacent Bluetooth range. Relevant assets are Linux systems with Bluetooth enabled, especially those accepting pairing while configured to require HIGH security. Systems without Bluetooth hardware, disabled Bluetooth, or no pairing role exposure are less likely affected.
Exploitation context
The CVSS vector is adjacent-network, low complexity, no privileges, and no user interaction. The provided sources do not state public exploit availability or active exploitation, and KEV status is false.
Researcher notes
The vulnerable behavior concerns responder-side SMP auth_req construction before enforcing BT_SECURITY_HIGH. The fix forces SMP_AUTH_MITM when local HIGH security requires it and checks IO capability feasibility first. Affected version data in the source bundle is limited and should be reconciled with distro backports.
Mitigation direction
- Apply Linux stable kernel updates containing the referenced Bluetooth SMP fix.
- Prioritize Bluetooth-enabled laptops, embedded devices, kiosks, and IoT gateways.
- If patch timing is uncertain, check distribution or device vendor guidance.
- Disable Bluetooth where it is not required for business operations.
- Restrict pairing availability on sensitive systems until patched.
Validation and detection
- Inventory Linux kernel versions across Bluetooth-capable assets.
- Identify systems with Bluetooth enabled and discoverable or pairable workflows.
- Check vendor advisories for backported fixes matching your distribution kernel.
- Confirm the fix is present through vendor package metadata or kernel changelog.
- Verify Bluetooth remains disabled on systems where it is not needed.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2026-43334 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 8.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H2.85.9LinuxVulnerability scoring details
Base CVSS 3.1 score
8.8HighVector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/425a22c5373d4e1b46492ab869074ebeeade61f3CVE reference, Linux
- https://git.kernel.org/stable/c/7ab69426e7ecbd18a222ee2ec87ca612d30197d7CVE reference, Linux
- https://git.kernel.org/stable/c/01bb4045d2306c266178f49ce0c3576d237a3040CVE reference, Linux
- https://git.kernel.org/stable/c/91649c02c1baaa18cedf7fb425fa1f0f852c8183CVE reference, Linux
- https://git.kernel.org/stable/c/c8ff0ca6508535bccabd81c5c9dcc63de8a3d4fbCVE reference, Linux
- https://git.kernel.org/stable/c/fa14e0e19820b1bbdb42185c9c4efa950bcffef9CVE reference, Linux
- https://git.kernel.org/stable/c/ec17efb1ef91506cfd17a77692eaf4bbacb520eaCVE reference, Linux
- https://git.kernel.org/stable/c/d05111bfe37bfd8bd4d2dfe6675d6bdeef43f7c7CVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.