PT-2022-5922 · Unknown+1 · Bluetooth Core Specification+1

Published 2022-12-11 · Updated 2026-04-20 · CVE-2022-25836

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Bluetooth Core Specification versions 4.0 through 5.3 Linux kernel (affected versions not specified)

Description The issue is related to errors in the authentication procedure of the Bluetooth Low Energy driver in the Linux kernel. It may allow a remote attacker to elevate their privileges. The Bluetooth Low Energy Pairing in Bluetooth Core Specification versions 4.0 through 5.3 is vulnerable to an unauthenticated Man-In-The-Middle (MITM) attack. The MITM can acquire credentials by negotiating Legacy Passkey Pairing with the pairing Initiator and Secure Connections Passkey Pairing with the pairing Responder, then brute forcing the Passkey entered by the user into the Initiator. The identified Passkey value can be used to complete authentication with the Responder via Bluetooth pairing method confusion.

Recommendations For Bluetooth Core Specification versions 4.0 through 5.3, consider disabling Legacy Passkey Pairing to minimize the risk of exploitation. For Linux kernel, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-294

Related Identifiers

BDU:2022-07342

CVE-2022-25836

Affected Products

Bluetooth Core Specification

Linux Kernel

References · 14

• https://bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2022-25836 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-25836 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-25836 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-25836 · Security Note
• https://ubuntu.com/security/CVE-2022-25836 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2022-25836 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25836 · Security Note
• https://bdu.fstec.ru/vul/2022-07342 · Security Note
• https://reddit.com/r/androiddev/comments/1oe10qe/checking_if_my_android_devices_have_critical_high · Reddit Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25836 · Note
• https://t.me/cibsecurity/54271 · Telegram Post
• https://t.me/cvenotify/39869 · Telegram Post
• https://bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/confusion-in-ble-passkey · Note