BaselineWatch
Desk

CVE-2026-43134

8.1 high SSVC exploitation: none Modified

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ This adds a check for encryption key size upon receiving L2CAP_LE_CONN_REQ which is required by L2CAP/LE/CFC/BV-15-C which expects L2CAP_CR_LE_BAD_KEY_SIZE.

Fix

Patch, vendor advisory and mitigation references on NVD 8

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 3

  1. CwesCWE-326NVD modified 2026-10-19 20:18
  2. StatusAnalyzed → ModifiedNVD modified 2026-10-19 20:18
  3. First seenCVSS 8.1 · linuxNVD modified 2026-10-16 16:17

Affected (CPE criteria) 2

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*

References 8