PT-2026-36434 · Linux · Linux Kernel

Published 2026-04-01 · Updated 2026-05-15 · CVE-2026-43017

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Bluetooth MGMT component where the mesh send() function fails to verify that the bytes provided for the flexible adv data[] array match the embedded adv data len field. Because MGMT MESH SEND SIZE only covers the fixed header, a truncated command can bypass the 20 to 50 byte range check, potentially causing the asynchronous mesh send path to read past the end of the queued command buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

CWE-130

Related Identifiers

BDU:2026-06510

CVE-2026-43017

ECHO-F0E0-1134-C421

OESA-2026-2312

OESA-2026-2313

OESA-2026-2314

Affected Products

Linux Kernel

References · 46

• https://nvd.nist.gov/vuln/detail/CVE-2026-31575 · Security Note
• https://git.kernel.org/stable/c/562ed1954f0c1bff3422b7b752bd3dacf185edbf · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43214 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43018 · Security Note
• https://git.kernel.org/stable/c/edb5898cfa91afe7e8f83eda18d93034c953d632 · Patch
• https://osv.dev/vulnerability/OESA-2026-2313 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31625 · Security Note
• https://bdu.fstec.ru/vul/2026-06510 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43017 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31515 · Security Note
• https://git.kernel.org/stable/c/24fa32369cf15d8fc918bdfe94097b12e6acada0 · Patch
• https://git.kernel.org/stable/c/bda93eec78cdbfe5cda00785cefebd443e56b88b · Patch
• https://git.kernel.org/stable/c/0b706fb2294aff3adfd54653bda1b5e356ad4566 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31674 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2314 · Vendor Advisory