Out-of-Bounds Read Vulnerability in BlueZ Bluetooth Monitor Tool
CVE-2026-105460
5.5MEDIUM
What is CVE-2026-105460?
A vulnerability in the btmon Bluetooth monitor tool within BlueZ can lead to an out-of-bounds read condition when processing specially crafted HCI Return Link Keys events. Attackers may exploit this flaw by supplying a malicious btsnoop capture file that specifies an excessive number of link keys. This can cause btmon to read beyond its allocated buffer, potentially leading to crashes and enabling further exploitation of the system.
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank zhailiangliang (Loongson Technology) for reporting this issue.