Skip to main content
CVE-2026-45834VulnerabilityPublished Updated

Bundesamt für Sicherheit in der Informationstechnik Debian · Linux Kernel (Bluetooth): Mehrere Schwachstellen ermöglichen Denial of Service

Affects Bundesamt für Sicherheit in der Informationstechnik DebianSource GCVE Database

0
Compare
Authoritative record:CVE-2026-45834· Medium

Not known to be exploited · fixed in Debian package updates : update Bundesamt für Sicherheit in der Informationstechnik Debian when convenient.

Data as of 13 Nov 2026, 11:52 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
EPSS
0.1% chance of exploitation in 30 days – higher than 2% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in c88c185ae0a1067823661b220aeea613df2c127b, a2dcf1a61d056aef15b63c6eae9441344d624389, 85426e97dc72f2088ba6d27e74cd58c3fbd43e31 +5

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 26 May 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 13 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 89bc500e41fc5b48e0573e6b0d927fc97b8951dc, < c88c185ae0a1067823661b220aeea613df2c127b
Fixed in
  • c88c185ae0a1067823661b220aeea613df2c127b
LinuxLinuxAffected
  • ≥ 89bc500e41fc5b48e0573e6b0d927fc97b8951dc, < a2dcf1a61d056aef15b63c6eae9441344d624389
Fixed in
  • a2dcf1a61d056aef15b63c6eae9441344d624389
LinuxLinuxAffected
  • ≥ 89bc500e41fc5b48e0573e6b0d927fc97b8951dc, < 85426e97dc72f2088ba6d27e74cd58c3fbd43e31
Fixed in
  • 85426e97dc72f2088ba6d27e74cd58c3fbd43e31
LinuxLinuxAffected
  • ≥ 89bc500e41fc5b48e0573e6b0d927fc97b8951dc, < 5105f3e6b2df619c635b5f6a49fac131a36c7952
Fixed in
  • 5105f3e6b2df619c635b5f6a49fac131a36c7952
LinuxLinuxAffected
  • ≥ 89bc500e41fc5b48e0573e6b0d927fc97b8951dc, < 1810e42ff6716f320c7269d5850eca48b07b7427
Fixed in
  • 1810e42ff6716f320c7269d5850eca48b07b7427
LinuxLinuxAffected
  • ≥ 89bc500e41fc5b48e0573e6b0d927fc97b8951dc, < 2ff1a41a912de8517b4482e946dd951b7d80edbf
Fixed in
  • 2ff1a41a912de8517b4482e946dd951b7d80edbf

AI-suggested

A fix is available in Debian version 7.0.7. Users and administrators should upgrade affected systems to this version or later to remediate these vulnerabilities. No additional mitigation steps are indicated in the vendor advisory.

Description

Multiple vulnerabilities in the Linux kernel's Bluetooth and related subsystems allow local attackers to cause denial of service, escalate privileges, or expose sensitive information. These issues affect Debian versions prior to 7.0.7 and have been fixed in version 7.0.7. The vulnerabilities include logic flaws in socket buffer handling, race conditions, memory leaks, and improper resource isolation in AMD processors.

References

Community reviews

Loading reviews…