MEDIUM 5.5 NVD
CVE-2026-105460
A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A
A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A maliciously crafted btsnoop capture file can specify a large number of link keys that exceeds the actual packet data, causing btmon to read beyond the allocated buffer and crash.
References
- https://access.redhat.com/security/cve/CVE-2026-105460
- https://bugzilla.redhat.com/show_bug.cgi?id=2545923
- https://redhat.atlassian.net/browse/PSIRTSUPT-24932
This medium severity vulnerability with a CVSS score of 5.5 was published on 2026-10-13 via NVD.
vulnfeed aggregates 13242 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.