CVE-2026-43020

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43020
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate LTK enc_size on load Load Long Term Keys stores the user-provided enc_size and later uses it to size fixed-size stack operations when replying to LE LTK requests. An enc_size larger than the 16-byte key buffer can therefore overflow the reply stack buffer. Reject oversized enc_size values while validating the management LTK record so invalid keys never reach the stored key state.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0f37d1e65c6d71ad94ccfb5c602163c525db789d Patch
https://git.kernel.org/stable/c/257cdb960d8ff6d60bb6461b03c814b6cf0c9e64 Patch
https://git.kernel.org/stable/c/40ba329e8b4cd2fb11b0caf5e6a543ceaebb6009 Patch
https://git.kernel.org/stable/c/50fb64defa72a3fecd0af1ca7c6b47b5c5c2b257 Patch
https://git.kernel.org/stable/c/82f342b3b006ca1d65f4890c05f2ec32fcb808b6 Patch
https://git.kernel.org/stable/c/b8dbe9648d69059cfe3a28917bfbf7e61efd7f15 Patch
https://git.kernel.org/stable/c/c34577f517b556fb6ca173d45bf7e766ae2564ce Patch
https://git.kernel.org/stable/c/f71695e81f4cb428f3c7e2138eae88199005b52c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
History

08 May 2026, 14:41

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/0f37d1e65c6d71ad94ccfb5c602163c525db789d - () https://git.kernel.org/stable/c/0f37d1e65c6d71ad94ccfb5c602163c525db789d - Patch
References () https://git.kernel.org/stable/c/257cdb960d8ff6d60bb6461b03c814b6cf0c9e64 - () https://git.kernel.org/stable/c/257cdb960d8ff6d60bb6461b03c814b6cf0c9e64 - Patch
References () https://git.kernel.org/stable/c/40ba329e8b4cd2fb11b0caf5e6a543ceaebb6009 - () https://git.kernel.org/stable/c/40ba329e8b4cd2fb11b0caf5e6a543ceaebb6009 - Patch
References () https://git.kernel.org/stable/c/50fb64defa72a3fecd0af1ca7c6b47b5c5c2b257 - () https://git.kernel.org/stable/c/50fb64defa72a3fecd0af1ca7c6b47b5c5c2b257 - Patch
References () https://git.kernel.org/stable/c/82f342b3b006ca1d65f4890c05f2ec32fcb808b6 - () https://git.kernel.org/stable/c/82f342b3b006ca1d65f4890c05f2ec32fcb808b6 - Patch
References () https://git.kernel.org/stable/c/b8dbe9648d69059cfe3a28917bfbf7e61efd7f15 - () https://git.kernel.org/stable/c/b8dbe9648d69059cfe3a28917bfbf7e61efd7f15 - Patch
References () https://git.kernel.org/stable/c/c34577f517b556fb6ca173d45bf7e766ae2564ce - () https://git.kernel.org/stable/c/c34577f517b556fb6ca173d45bf7e766ae2564ce - Patch
References () https://git.kernel.org/stable/c/f71695e81f4cb428f3c7e2138eae88199005b52c - () https://git.kernel.org/stable/c/f71695e81f4cb428f3c7e2138eae88199005b52c - Patch
CWE CWE-787
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

01 May 2026, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-01 15:16

Updated : 2026-05-08 14:41

NVD link : CVE-2026-43020

Mitre link : CVE-2026-43020

CVE.ORG link : CVE-2026-43020

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write