CVE-2026-65935 Bypassing passkey entry in legacy pairing

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below...

CVE-2026-65935

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below...

CVE-2026-65935 Bypassing passkey entry in legacy pairing

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value. See vulnerability B-E3 in the related paper below...

EUVD-2026-58079

A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

CVE-2026-65933

A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

CVE-2026-65933 BT122 malformed packet with increased length field causes memory leak

A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in the related paper below...

CVE-2026-65933

The CVE-2026-65933 entry concerns the BT122 Bluetooth module. A malformed Bluetooth connection request message with an increased length field can trigger a memory leak, potentially leaking sensitive information. The vulnerability is tied to the BT122’s handling of connection request messages (des...

CVE-2026-65932 BT122 stops advertising

The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service. See vulnerability B-E2 in the related paper below...

CVE-2026-65932

The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service. See vulnerability B-E2 in the related paper below...

CVE-2026-19292

The CVE-2026-19292 entry describes a Bluetooth re-pairing flow where pairing with a legitimate device can switch to a lower security level than before, making brute-force attempts on the Long-Term Key (LTK) easier. The issue is documented with CVSS 3.1 base metrics (8.8, HIGH) and an adjacent att...

EUVD-2026-57927

Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below...

CVE-2026-19292 Bluetooth re-pairing with legitimate device can use lower security level

Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below...

CVE-2026-19291

The CVE-2026-19291 issue affects RS9116W and SiWx91x devices during Bluetooth re-pairing, where re-pairing with an existing device can use a lower security level than the previous pairing. The connection in the documents notes the problem and references the BLERP paper for details, implying a dow...

EUVD-2026-57926

Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below...

CVE-2026-19291 Bluetooth re-pairing can use a lower security level than previous

Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below...

CVE-2026-16101 forced re-pairing with already bonded device

Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below...

EUVD-2026-57925

Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below...

CVE-2026-16101

The CVE concerns Silicon Labs RS9116W and SiWx917 wireless components. A spoofed, already bonded device can force re-pairing with a rogue device, effectively re-bonding security associations and potentially granting adjacent attackers high-impact access. The vulnerability stems from improper bond...

The vulnerability of the Linux operating system’s kernel Bluetooth module, allowing a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel Bluetooth module is related to premature resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2026-31450: ext4: publish jinode after initialization bsc1262618. CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on l2capsockreadycb bsc1262603. CVE-2026-31624:...