Threats tagged 'ghsa-3ggx-x2j4-gfqr'

CVE-2026-43334 is a high-severity vulnerability in the Linux kernel's Bluetooth subsystem related to Secure Simple Pairing (SMP). The flaw involves improper enforcement of Man-In-The-Middle (MITM) protection requirements during the pairing process. Specifically, the pairing response can omit MITM requirements even when the local device mandates high security, leading to inconsistent authentication methods. This could allow an attacker to bypass intended MITM protections during Bluetooth pairing.