Skip to content
OpenAdvisories
Unscored CVE-2020-26558 EUVD-2020-19103GHSA-7g33-jchx-2fjc

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to id…

Published May 24, 2021 · Updated Nov 4, 2025 · Assigned by mitre

Package: bluez Package: bluez Package: linux Package: linux Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.3 Package: linux-aws-5.4 Package: linux-aws-5.8 Package: linux-aws-fips Package: linux-aws-hwe Package: linux-azure Package: linux-azure-4.15 Package: linux-azure-5.11 Package: linux-azure-5.3 Package: linux-azure-5.4 Package: linux-azure-5.8 Package: linux-azure-edge Package: linux-azure-fde-5.15 Package: linux-azure-fips Package: linux-bluefield Package: linux-dell300x Package: linux-fips Package: linux-gcp Package: linux-gcp-4.15 Package: linux-gcp-5.11 Package: linux-gcp-5.3 Package: linux-gcp-5.4 Package: linux-gcp-5.8 Package: linux-gcp-edge Package: linux-gcp-fips Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.4 Package: linux-hwe-5.8 Package: linux-hwe-edge Package: linux-intel-iot-realtime Package: linux-kvm Package: linux-lts-xenial Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.6 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.3 Package: linux-oracle-5.4 Package: linux-oracle-5.8 Package: linux-raspi Package: linux-raspi-5.4 Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.8 Package: linux-snapdragon Package: linux-vmware Ecosystem: Debian Ecosystem: Ubuntu

Description

Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 bluez 5.55-3.1 —
Debian 14 linux 5.10.40-1 —
Debian 13 bluez 5.55-3.1 —
Debian 13 linux 5.10.40-1 —
Debian 12 bluez 5.55-3.1 —
Debian 12 linux 5.10.40-1 —
Debian 10 bluez 5.50-1.2~deb10u2 DSA-4951-1
Debian 9 bluez 5.43-2+deb9u4 DLA-2692-1
Debian 9 linux 4.9.272-1 DLA-2689-1
Debian 9 linux-4.19 4.19.194-1~deb9u1 DLA-2690-1
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS linux-vmware No fix yet —
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-realtime +1 No fix yet —
Ubuntu 20.04 LTS bluez 5.53-0ubuntu3.2 USN-4989-1
Ubuntu 20.04 LTS linux 5.4.0-80.90 USN-5017-1
Ubuntu 20.04 LTS linux-aws 5.4.0-1054.57 USN-5017-1
Ubuntu 20.04 LTS linux-aws-5.11 +1 5.11.0-1016.17~20.04.1 —
Ubuntu 20.04 LTS linux-aws-5.8 5.8.0-1042.44~20.04.1 USN-5050-1
Ubuntu 20.04 LTS linux-azure 5.4.0-1055.57 USN-5017-1
Ubuntu 20.04 LTS linux-azure-5.11 5.11.0-1013.14~20.04.1 —
Ubuntu 20.04 LTS linux-azure-5.8 5.8.0-1040.43~20.04.1 USN-5050-1
Ubuntu 20.04 LTS linux-bluefield 5.4.0-1016.19 —
Ubuntu 20.04 LTS linux-gcp 5.4.0-1049.53 USN-5017-1
Ubuntu 20.04 LTS linux-gcp-5.11 5.11.0-1017.19~20.04.1 —
Ubuntu 20.04 LTS linux-gcp-5.8 5.8.0-1039.41 USN-5050-1
Ubuntu 20.04 LTS linux-gke 5.4.0-1049.52 USN-5017-1
Ubuntu 20.04 LTS linux-gkeop 5.4.0-1021.22 USN-5017-1
Ubuntu 20.04 LTS linux-hwe-5.11 5.11.0-34.36~20.04.1 USN-5046-1
Ubuntu 20.04 LTS linux-kvm 5.4.0-1044.46 USN-5017-1
Ubuntu 20.04 LTS linux-oem-5.10 5.10.0-1032.33 —
Ubuntu 20.04 LTS linux-oracle 5.4.0-1052.56 USN-5017-1
Ubuntu 20.04 LTS linux-oracle-5.8 5.8.0-1038.39~20.04.1 USN-5050-1
Ubuntu 20.04 LTS linux-raspi 5.4.0-1041.45 USN-5017-1
Ubuntu 20.04 LTS linux-riscv +4 No fix yet —
Ubuntu 20.04 LTS linux-riscv-5.11 5.11.0-1017.18~20.04.1 —
Ubuntu 18.04 LTS bluez 5.48-0ubuntu3.5 USN-4989-1
Ubuntu 18.04 LTS linux 4.15.0-151.157 USN-5018-1
Ubuntu 18.04 LTS linux-aws 4.15.0-1109.116 USN-5018-1
Ubuntu 18.04 LTS linux-aws-5.4 5.4.0-1054.57~18.04.1 USN-5017-1
Ubuntu 18.04 LTS linux-azure-4.15 4.15.0-1121.134 USN-5018-1
Ubuntu 18.04 LTS linux-azure-5.4 5.4.0-1055.57~18.04.1 USN-5017-1
Ubuntu 18.04 LTS linux-dell300x 4.15.0-1027.32 —
Ubuntu 18.04 LTS linux-gcp +13 No fix yet —
Ubuntu 18.04 LTS linux-gcp-4.15 4.15.0-1106.120 USN-5018-1
Ubuntu 18.04 LTS linux-gcp-5.4 5.4.0-1049.53~18.04.1 USN-5017-1
Ubuntu 18.04 LTS linux-gke-5.4 5.4.0-1049.52~18.04.1 USN-5017-1
Ubuntu 18.04 LTS linux-gkeop-5.4 5.4.0-1021.22~18.04.1 USN-5017-1
Ubuntu 18.04 LTS linux-hwe-5.4 5.4.0-80.90~18.04.1 USN-5017-1
Ubuntu 18.04 LTS linux-kvm 4.15.0-1097.99 USN-5018-1
Ubuntu 18.04 LTS linux-oracle 4.15.0-1078.86 USN-5018-1
Ubuntu 18.04 LTS linux-oracle-5.4 5.4.0-1052.56~18.04.1 USN-5017-1
Ubuntu 18.04 LTS linux-raspi-5.4 5.4.0-1041.45~18.04.1 USN-5017-1
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1092.98 USN-5018-1
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1109.118 USN-5018-1
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Ubuntu Pro FIPS 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 20.04 LTS linux-aws-fips 5.4.0-1069.73+fips2 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-azure-fips 5.4.0-1073.76+fips1 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-fips 5.4.0-1031.36 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-gcp-fips 5.4.0-1067.71~20.04.1 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2051.53 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2033.37 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips 4.15.0-1066.75 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-gcp-fips 4.15.0-2016.18 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips 4.4.0-1069.75 —
Ubuntu Pro 20.04 LTS linux-azure-fde-5.15 5.15.0-1114.123~20.04.1 —
Ubuntu Pro 16.04 LTS bluez 5.37-0ubuntu5.3+esm1 USN-4989-2
Ubuntu Pro 16.04 LTS linux 4.4.0-219.252 USN-5343-1, USN-5299-1
Ubuntu Pro 16.04 LTS linux-aws 4.4.0-1135.149 USN-5343-1, USN-5299-1
Ubuntu Pro 16.04 LTS linux-aws-hwe 4.15.0-1109.116~16.04.1 USN-5018-1
Ubuntu Pro 16.04 LTS linux-azure 4.15.0-1121.134~16.04.1 USN-5018-1
Ubuntu Pro 16.04 LTS linux-gcp 4.15.0-1106.120~16.04.1 USN-5018-1
Ubuntu Pro 16.04 LTS linux-hwe 4.15.0-151.157~16.04.1 USN-5018-1
Ubuntu Pro 16.04 LTS linux-kvm 4.4.0-1100.109 USN-5343-1, USN-5299-1
Ubuntu Pro 16.04 LTS linux-oracle 4.15.0-1078.86~16.04.1 USN-5018-1
Ubuntu Pro 14.04 LTS linux No fix yet —
Ubuntu Pro 14.04 LTS linux-aws 4.4.0-1099.104 USN-5343-1, USN-5299-1
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1121.134~14.04.1 USN-5018-1
Ubuntu Pro 14.04 LTS linux-lts-xenial 4.4.0-219.252~14.04.1 USN-5343-1, USN-5299-1
ReleasePackageFixed inAdvisory
RHEL 8 bluez +5 5.56-1.el8 RHSA-2021:4432
ReleasePackageFixed inAdvisory
SLES 15 SP3 bluez 5.55-3.3.1 SUSE-SU-2021:2291-1
SLES 15 SP3 kernel-64kb +7 5.3.18-59.10.1 SUSE-SU-2024:2948-1, SUSE-SU-2021:2184-1
SLES 15 SP3 kernel-azure +2 5.3.18-38.8.1 SUSE-SU-2021:2202-1
SLES 15 SP3 kernel-default-base 5.3.18-59.10.1.18.4.2 SUSE-SU-2024:2948-1, SUSE-SU-2021:2184-1
SLES 15 SP2 bluez 5.48-150200.13.17.1 SUSE-SU-2022:3691-1
SLES 15 SP2 kernel-azure +2 5.3.18-18.53.1 SUSE-SU-2021:2303-1
SLES 15 SP2 kernel-default-base 5.3.18-24.70.1.9.32.1 SUSE-SU-2024:2923-1, SUSE-SU-2021:2325-1
SLES 15 SP2 kernel-docs +5 5.3.18-24.70.1 SUSE-SU-2024:2923-1, SUSE-SU-2021:2325-1
SLES 15 SP1 bluez 5.48-150000.5.41.1 SUSE-SU-2022:3687-1
SLES 15 SP1 kernel-docs +5 4.12.14-197.99.1 SUSE-SU-2021:2427-1
SLES 15 bluez 5.48-150000.5.41.1 SUSE-SU-2022:3687-1
SLES 15 kernel-docs +6 4.12.14-150.75.1 SUSE-SU-2021:2421-1
SLES 12 SP5 kernel-azure +2 4.12.14-16.62.1 SUSE-SU-2024:2901-1, SUSE-SU-2021:2321-1
SLES 12 SP5 kernel-docs +4 4.12.14-122.77.1 SUSE-SU-2024:2940-1, SUSE-SU-2021:2324-1
Show 39 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP4 kernel-syms +2 4.12.14-95.80.1 SUSE-SU-2021:2422-1
SLES 12 SP3 kernel-syms +2 4.4.180-94.147.1 SUSE-SU-2021:2451-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_40 1-4.3.1 SUSE-SU-2021:2451-1
SLES 12 SP2 kernel-syms +2 4.4.121-92.158.1 SUSE-SU-2021:2406-1
SLES for SAP 15 SP3 kernel-default-base 5.3.18-150300.59.170.1.150300.18.100.1 SUSE-SU-2024:2948-1
SLES for SAP 15 SP3 kernel-docs 5.3.18-150300.59.170.2 SUSE-SU-2024:2948-1
SLES for SAP 15 SP3 kernel-syms +4 5.3.18-150300.59.170.1 SUSE-SU-2024:2948-1
SLES for SAP 15 SP2 bluez 5.48-150200.13.17.1 SUSE-SU-2022:3691-1
SLES for SAP 15 SP2 kernel-default-base 5.3.18-150200.24.200.1.150200.9.103.1 SUSE-SU-2024:2923-1
SLES for SAP 15 SP2 kernel-docs +5 5.3.18-150200.24.200.1 SUSE-SU-2024:2923-1
SLES for SAP 15 SP1 bluez 5.48-150000.5.41.1 SUSE-SU-2022:3687-1
SLES for SAP 15 SP1 kernel-docs +4 4.12.14-197.99.1 SUSE-SU-2021:2427-1
SLES for SAP 15 bluez 5.48-150000.5.41.1 SUSE-SU-2022:3687-1
SLES for SAP 15 kernel-docs +5 4.12.14-150.75.1 SUSE-SU-2021:2421-1
SLES for SAP 12 SP5 kernel-azure +2 4.12.14-16.62.1 SUSE-SU-2024:2901-1, SUSE-SU-2021:2321-1
SLES for SAP 12 SP5 kernel-syms +2 4.12.14-122.77.1 SUSE-SU-2024:2940-1, SUSE-SU-2021:2324-1
SLES for SAP 12 SP4 kernel-syms +2 4.12.14-95.80.1 SUSE-SU-2021:2422-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.180-94.147.1 SUSE-SU-2021:2451-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_40 1-4.3.1 SUSE-SU-2021:2451-1
SLE Real Time 12 SP5 kernel-rt +3 4.12.14-10.49.1 SUSE-SU-2021:2349-1
SLE Micro 5.2 kernel-default 5.3.18-150300.59.170.1 SUSE-SU-2024:2948-1
SLE Micro 5.2 kernel-default-base 5.3.18-150300.59.170.1.150300.18.100.1 SUSE-SU-2024:2948-1
SLE Micro 5.1 kernel-default 5.3.18-150300.59.170.1 SUSE-SU-2024:2948-1
SLE Micro 5.1 kernel-default-base 5.3.18-150300.59.170.1.150300.18.100.1 SUSE-SU-2024:2948-1
SLE Micro 5.0 kernel-default 5.3.18-24.70.1 SUSE-SU-2021:2325-1
SLE Micro 5.0 kernel-default-base 5.3.18-24.70.1.9.32.1 SUSE-SU-2021:2325-1
SLE Micro 5.0 kernel-rt 4.12.14-10.49.1 SUSE-SU-2021:2349-1
SLE Live Patching 15 SP3 kernel-default 5.3.18-59.10.1 SUSE-SU-2024:2948-1, SUSE-SU-2021:2184-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_2 1-7.5.1 SUSE-SU-2021:2184-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_47 1-150300.7.3.1 SUSE-SU-2024:2948-1
SLE Live Patching 15 SP2 kernel-default 5.3.18-24.70.1 SUSE-SU-2024:2923-1, SUSE-SU-2021:2325-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_16 1-5.3.1 SUSE-SU-2021:2325-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_51 1-150200.5.3.1 SUSE-SU-2024:2923-1
SLE Live Patching 15 SP1 kernel-default 4.12.14-197.99.1 SUSE-SU-2021:2427-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_26 1-3.3.3 SUSE-SU-2021:2427-1
SLE Live Patching 15 kernel-default 4.12.14-150.75.1 SUSE-SU-2021:2421-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_25 1-1.3.1 SUSE-SU-2021:2421-1
SLE Live Patching 12 SP5 kernel-default 4.12.14-122.77.1 SUSE-SU-2024:2940-1, SUSE-SU-2021:2324-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_20 +1 1-8.3.1 SUSE-SU-2024:2940-1, SUSE-SU-2021:2324-1
SLE Live Patching 12 SP4 kernel-default 4.12.14-95.80.1 SUSE-SU-2021:2422-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_22 1-6.3.1 SUSE-SU-2021:2422-1
SLE HPC 15 SP3 kernel-64kb +5 5.3.18-150300.59.170.1 SUSE-SU-2024:2948-1
SLE HPC 15 SP3 kernel-default-base 5.3.18-150300.59.170.1.150300.18.100.1 SUSE-SU-2024:2948-1
SLE HPC 15 SP3 kernel-docs 5.3.18-150300.59.170.2 SUSE-SU-2024:2948-1
SLE HPC 15 SP2 bluez 5.48-150200.13.17.1 SUSE-SU-2022:3691-1
SLE HPC 15 SP2 kernel-default-base 5.3.18-150200.24.200.1.150200.9.103.1 SUSE-SU-2024:2923-1
SLE HPC 15 SP2 kernel-docs +5 5.3.18-150200.24.200.1 SUSE-SU-2024:2923-1
SLE HPC 15 SP1 bluez 5.48-150000.5.41.1 SUSE-SU-2022:3687-1
SLE HPC 15 SP1 kernel-docs +4 4.12.14-197.99.1 SUSE-SU-2021:2427-1
SLE HPC 15 bluez 5.48-150000.5.41.1 SUSE-SU-2022:3687-1
SLE HPC 15 kernel-docs +5 4.12.14-150.75.1 SUSE-SU-2021:2421-1
SUSE Real Time Module 15 SP2 kernel-rt +1 5.3.18-42.2 SUSE-SU-2021:2426-1
SUSE Real Time Module 15 SP2 kernel-syms-rt +1 5.3.18-42.1 SUSE-SU-2021:2426-1
SUSE Real Time Module 15 SP2 lttng-modules 2.10.10-1.5.1 SUSE-SU-2021:2426-1
SUSE Real Time Module 15 SP2 oracleasm 2.0.8-1.3.1 SUSE-SU-2021:2426-1
SUSE OpenStack Cloud Crowbar 9 kernel-syms +2 4.12.14-95.80.1 SUSE-SU-2021:2422-1
SUSE OpenStack Cloud Crowbar 8 kernel-syms +2 4.4.180-94.147.1 SUSE-SU-2021:2451-1
SUSE OpenStack Cloud Crowbar 8 kgraft-patch-SLE12-SP3_Update_40 1-4.3.1 SUSE-SU-2021:2451-1
SUSE OpenStack Cloud 9 kernel-syms +2 4.12.14-95.80.1 SUSE-SU-2021:2422-1
SUSE OpenStack Cloud 8 kernel-syms +2 4.4.180-94.147.1 SUSE-SU-2021:2451-1
SUSE OpenStack Cloud 8 kgraft-patch-SLE12-SP3_Update_40 1-4.3.1 SUSE-SU-2021:2451-1
SUSE Manager Server 4.1 bluez 5.48-150200.13.17.1 SUSE-SU-2022:3691-1
SUSE Manager Server 4.0 kernel-docs +5 4.12.14-197.99.1 SUSE-SU-2021:2427-1
SUSE Manager Retail Branch Server 4.1 bluez 5.48-150200.13.17.1 SUSE-SU-2022:3691-1
SUSE Manager Retail Branch Server 4.0 kernel-docs +4 4.12.14-197.99.1 SUSE-SU-2021:2427-1
SUSE Manager Proxy 4.1 bluez 5.48-150200.13.17.1 SUSE-SU-2022:3691-1
SUSE Manager Proxy 4.0 kernel-docs +4 4.12.14-197.99.1 SUSE-SU-2021:2427-1
SUSE HPE Helion OpenStack 8 kernel-syms +2 4.4.180-94.147.1 SUSE-SU-2021:2451-1
SUSE HPE Helion OpenStack 8 kgraft-patch-SLE12-SP3_Update_40 1-4.3.1 SUSE-SU-2021:2451-1
SUSE Enterprise Storage 7.1 kernel-64kb +5 5.3.18-150300.59.170.1 SUSE-SU-2024:2948-1
SUSE Enterprise Storage 7.1 kernel-default-base 5.3.18-150300.59.170.1.150300.18.100.1 SUSE-SU-2024:2948-1
SUSE Enterprise Storage 7.1 kernel-docs 5.3.18-150300.59.170.2 SUSE-SU-2024:2948-1
SUSE Enterprise Storage 7 bluez 5.48-150200.13.17.1 SUSE-SU-2022:3691-1
SUSE Enterprise Storage 6 bluez 5.48-150000.5.41.1 SUSE-SU-2022:3687-1
SUSE Enterprise Storage 6 kernel-docs +4 4.12.14-197.99.1 SUSE-SU-2021:2427-1
ReleasePackageFixed inAdvisory
openSUSE Leap 15.3 bluez 5.55-3.3.1 openSUSE-SU-2021:2291-1
openSUSE Leap 15.3 kernel-64kb +6 5.3.18-59.10.1 openSUSE-SU-2021:2184-1
openSUSE Leap 15.3 kernel-azure +2 5.3.18-38.8.1 openSUSE-SU-2021:2202-1
openSUSE Leap 15.3 kernel-debug +4 4.12.14-197.99.1 openSUSE-SU-2021:2427-1, openSUSE-SU-2021:2184-1
openSUSE Leap 15.3 kernel-default-base 5.3.18-59.10.1.18.4.2 openSUSE-SU-2021:2184-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 kernel-livepatch-4.14.238-182.421 1.0-0.amzn2 ALAS2-2021-1685
Amazon Linux 2 perf +8 4.14.238-182.421.amzn2 ALAS2-2021-1685

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 bluez +5 5.56-1.el8 ELSA-2021-4432

Advisories 43

References