Threats tagged 'ghsa-vm8r-x97v-544j'

CVE-2026-31773 is a vulnerability in the Linux kernel's Bluetooth SMP (Security Manager Protocol) implementation. It concerns incorrect authentication labeling of the legacy responder STK (Short Term Key) based on the requested security level rather than the actual pairing outcome. This flaw causes the system to treat the STK as authenticated even when the pairing method does not provide MITM (Man-In-The-Middle) protection, potentially leading to elevated trust in unauthenticated keys.