PT-2026-38985 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-16 · CVE-2026-43334

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Bluetooth Security Manager Protocol (SMP) where the smp cmd pairing req() function builds a pairing response based on the initiator's authentication requirements before enforcing local high security requirements. If the initiator omits the SMP AUTH MITM (Man-in-the-Middle protection) flag, the response may also omit it despite the local side requiring it. Consequently, the tk request() function may select an inconsistent pairing method, such as JUST CFM, which contradicts the responder's enforced pairing policy.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43334

Affected Products

Linux Kernel

References · 20

• https://git.kernel.org/stable/c/425a22c5373d4e1b46492ab869074ebeeade61f3 · Patch
• https://git.kernel.org/stable/c/d05111bfe37bfd8bd4d2dfe6675d6bdeef43f7c7 · Patch
• https://cve.org/CVERecord?id=CVE-2026-43334 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-43334 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43334 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43334 · Security Note
• https://git.kernel.org/stable/c/fa14e0e19820b1bbdb42185c9c4efa950bcffef9 · Patch
• https://git.kernel.org/stable/c/ec17efb1ef91506cfd17a77692eaf4bbacb520ea · Patch
• https://git.kernel.org/stable/c/7ab69426e7ecbd18a222ee2ec87ca612d30197d7 · Patch
• https://git.kernel.org/stable/c/01bb4045d2306c266178f49ce0c3576d237a3040 · Patch
• https://git.kernel.org/stable/c/c8ff0ca6508535bccabd81c5c9dcc63de8a3d4fb · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43334 · Vendor Advisory
• https://git.kernel.org/stable/c/91649c02c1baaa18cedf7fb425fa1f0f852c8183 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43334 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-43334 · Vendor Advisory