CVE Catalog
CVE-2026-43134
MediumSummary
A vulnerability in the Linux kernel related to the missing encryption key size check upon receiving L2CAP_LE_CONN_REQ has been resolved.
Risk Assessment
The lack of proper key size checking may lead to unauthorized access to Bluetooth connections, posing a risk to data security.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ This adds a check for encryption key size upon receiving L2CAP_LE_CONN_REQ which is required by L2CAP/LE/CFC/BV-15-C which expects L2CAP_CR_LE_BAD_KEY_SIZE.