CVE-2026-31773 — Improper Authentication in Linux

Vendor	Product	Version range	Fixed in
linux	linux	—	—
linux	linux	—	—
linux	linux	>= 3.15.5 < 3.16	3.16
linux	linux	>= fff3490f47810e2d34b91fb9e31103e923b11c2f < 9a38659a3d06080715691bd3139f9c4b61f688e3	9a38659a3d06080715691bd3139f9c4b61f688e3
linux	linux	>= fff3490f47810e2d34b91fb9e31103e923b11c2f < 667f44f1392df6482483756458c48670e579e9ff	667f44f1392df6482483756458c48670e579e9ff
linux	linux	>= fff3490f47810e2d34b91fb9e31103e923b11c2f < 929db734d12db41ca5f95424db4612397f1bd4a7	929db734d12db41ca5f95424db4612397f1bd4a7
linux	linux	>= fff3490f47810e2d34b91fb9e31103e923b11c2f < b1c6a8e554a39b222c0879a288ea98e338fc4d77	b1c6a8e554a39b222c0879a288ea98e338fc4d77
linux	linux	>= fff3490f47810e2d34b91fb9e31103e923b11c2f < 0afc846bd80073ffcd2b8040f2b2fafaea3d9f72	0afc846bd80073ffcd2b8040f2b2fafaea3d9f72
linux	linux	>= fff3490f47810e2d34b91fb9e31103e923b11c2f < 061ee71ac6b03c9f8432fe49538c3682bfcf4cf3	061ee71ac6b03c9f8432fe49538c3682bfcf4cf3
linux	linux	>= fff3490f47810e2d34b91fb9e31103e923b11c2f < 9a6d0db176f082685e0b6149700c0baf3ce2aa8b	9a6d0db176f082685e0b6149700c0baf3ce2aa8b
linux	linux	>= fff3490f47810e2d34b91fb9e31103e923b11c2f < 20756fec2f0108cb88e815941f1ffff88dc286fe	20756fec2f0108cb88e815941f1ffff88dc286fe
linux	linux_kernel	—	—
linux	linux_kernel	—	—
linux	linux_kernel	—	—
linux	linux_kernel	—	—
linux	linux_kernel	—	—
linux	linux_kernel	—	—
linux	linux_kernel	—	—
linux	linux_kernel	—	—
linux	linux_kernel	>= 3.15.5 < 3.16	3.16
linux	linux_kernel	>= 3.16.1 < 5.10.253	5.10.253
linux	linux_kernel	>= 5.11 < 5.15.203	5.15.203
linux	linux_kernel	>= 5.16 < 6.1.168	6.1.168
linux	linux_kernel	>= 6.13 < 6.18.22	6.18.22
linux	linux_kernel	>= 6.19 < 6.19.12	6.19.12

Ubuntu

Linux kernel (Raspberry Pi) vulnerabilities

vendor_ubuntu·2026-09-21·CVSS 7.1

CVE-2026-46040 [HIGH] Linux kernel (Raspberry Pi) vulnerabilities Title: Linux kernel (Raspberry Pi) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896) It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation

Ubuntu

Linux kernel (GCP) vulnerabilities

vendor_ubuntu·2026-08-21·CVSS 7.1

CVE-2026-46187 [HIGH] Linux kernel (GCP) vulnerabilities Title: Linux kernel (GCP) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896) It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A

Ubuntu

Linux kernel (Raspberry Pi) vulnerabilities

vendor_ubuntu·2026-08-20·CVSS 2.0

CVE-2026-45855 [LOW] Linux kernel (Raspberry Pi) vulnerabilities Title: Linux kernel (Raspberry Pi) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values.

Ubuntu

Linux kernel (Intel IoTG) vulnerabilities

vendor_ubuntu·2026-07-31·CVSS 7.1

CVE-2026-52984 [HIGH] Linux kernel (Intel IoTG) vulnerabilities Title: Linux kernel (Intel IoTG) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896) It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation ca

Ubuntu

Linux kernel (Intel IoTG) vulnerabilities

vendor_ubuntu·2026-07-31·CVSS 7.1

CVE-2026-45912 [HIGH] Linux kernel (Intel IoTG) vulnerabilities Title: Linux kernel (Intel IoTG) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896) It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation ca

Ubuntu

Linux kernel (Azure FIPS) vulnerabilities

vendor_ubuntu·2026-07-29·CVSS 7.1

CVE-2026-46187 [HIGH] Linux kernel (Azure FIPS) vulnerabilities Title: Linux kernel (Azure FIPS) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896) It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation ca

Ubuntu

Linux kernel vulnerabilities

vendor_ubuntu·2026-07-28·CVSS 7.1

CVE-2024-36898 [HIGH] Linux kernel vulnerabilities Title: Linux kernel vulnerabilities Summary: Several security issues were fixed in the Linux kernel. Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896) It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local

Ubuntu

Linux kernel (HWE) vulnerabilities

vendor_ubuntu·2026-07-28·CVSS 2.0

CVE-2026-46073 [LOW] Linux kernel (HWE) vulnerabilities Title: Linux kernel (HWE) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local a

Ubuntu

Linux kernel (Azure CVM) vulnerabilities

vendor_ubuntu·2026-07-24·CVSS 2.0

CVE-2026-46073 [LOW] Linux kernel (Azure CVM) vulnerabilities Title: Linux kernel (Azure CVM) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A l

Ubuntu

Linux kernel (Azure FIPS) vulnerabilities

vendor_ubuntu·2026-07-24·CVSS 2.0

CVE-2026-46073 [LOW] Linux kernel (Azure FIPS) vulnerabilities Title: Linux kernel (Azure FIPS) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A

Ubuntu

Linux kernel (Azure CVM) vulnerabilities

vendor_ubuntu·2026-07-24·CVSS 2.0

CVE-2026-43129 [LOW] Linux kernel (Azure CVM) vulnerabilities Title: Linux kernel (Azure CVM) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A l

Ubuntu

Linux kernel (Azure CVM) vulnerabilities

vendor_ubuntu·2026-07-24·CVSS 7.1

CVE-2024-36898 [HIGH] Linux kernel (Azure CVM) vulnerabilities Title: Linux kernel (Azure CVM) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896) It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cac

Ubuntu

Linux kernel (Azure) vulnerabilities

vendor_ubuntu·2026-07-24·CVSS 2.0

CVE-2026-46073 [LOW] Linux kernel (Azure) vulnerabilities Title: Linux kernel (Azure) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local

Ubuntu

Linux kernel (AWS) vulnerabilities

vendor_ubuntu·2026-07-24·CVSS 2.0

CVE-2026-46073 [LOW] Linux kernel (AWS) vulnerabilities Title: Linux kernel (AWS) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local a

Ubuntu

Linux kernel (Oracle) vulnerabilities

vendor_ubuntu·2026-07-23·CVSS 2.0

CVE-2026-46073 [LOW] Linux kernel (Oracle) vulnerabilities Title: Linux kernel (Oracle) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A loca

Ubuntu

Linux kernel (NVIDIA) vulnerabilities

vendor_ubuntu·2026-07-23·CVSS 2.0

CVE-2026-43129 [LOW] Linux kernel (NVIDIA) vulnerabilities Title: Linux kernel (NVIDIA) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A loca

Ubuntu

Linux kernel (IBM) vulnerabilities

vendor_ubuntu·2026-07-23·CVSS 7.1

CVE-2026-46187 [HIGH] Linux kernel (IBM) vulnerabilities Title: Linux kernel (IBM) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896) It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A

Ubuntu

Linux kernel vulnerabilities

vendor_ubuntu·2026-07-23·CVSS 7.1

CVE-2026-46187 [HIGH] Linux kernel vulnerabilities Title: Linux kernel vulnerabilities Summary: Several security issues were fixed in the Linux kernel. Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896) It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local

Ubuntu

Linux kernel (NVIDIA Tegra) vulnerabilities

vendor_ubuntu·2026-07-23·CVSS 7.1

CVE-2026-46187 [HIGH] Linux kernel (NVIDIA Tegra) vulnerabilities Title: Linux kernel (NVIDIA Tegra) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896) It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation

Ubuntu

Linux kernel vulnerabilities

vendor_ubuntu·2026-07-23·CVSS 2.0

CVE-2026-46073 [LOW] Linux kernel vulnerabilities Title: Linux kernel vulnerabilities Summary: Several security issues were fixed in the Linux kernel. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacke

Ubuntu

Linux kernel (GCP FIPS) vulnerabilities

vendor_ubuntu·2026-07-21·CVSS 2.0

CVE-2026-46073 [LOW] Linux kernel (GCP FIPS) vulnerabilities Title: Linux kernel (GCP FIPS) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A lo

Ubuntu

Linux kernel vulnerabilities

vendor_ubuntu·2026-07-21·CVSS 7.1

CVE-2024-36898 [HIGH] Linux kernel vulnerabilities Title: Linux kernel vulnerabilities Summary: Several security issues were fixed in the Linux kernel. Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896) It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local

Ubuntu

Linux kernel (NVIDIA Tegra) vulnerabilities

vendor_ubuntu·2026-07-21·CVSS 7.1

CVE-2024-36898 [HIGH] Linux kernel (NVIDIA Tegra) vulnerabilities Title: Linux kernel (NVIDIA Tegra) vulnerabilities Summary: Several security issues were fixed in the Linux kernel. Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896) It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation

Ubuntu

Linux kernel vulnerabilities

vendor_ubuntu·2026-07-20·CVSS 2.0

CVE-2026-46073 [LOW] Linux kernel vulnerabilities Title: Linux kernel vulnerabilities Summary: Several security issues were fixed in the Linux kernel. It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacke

Red Hat

kernel: Bluetooth: SMP: derive legacy responder STK authentication from MITM state

vendor_redhat·2026-05-01·CVSS 7.0

CVE-2026-31773 [MEDIUM] CWE-372 kernel: Bluetooth: SMP: derive legacy responder STK authentication from MITM state kernel: Bluetooth: SMP: derive legacy responder STK authentication from MITM state A flaw was found in the Linux kernel's Bluetooth Security Manager Protocol (SMP). The system incorrectly labels a Short Term Key (STK) as authenticated during legacy pairing, even when Man-in-the-Middle (MITM) protection was not established. This misrepresentation of the key's authentication status could allow an attacker to bypass expected security measures, potentially leading to unauthorized access or a downgrade of the Bluetooth connection's security. Package: kernel (Red Hat Enterprise Linux 10) - Affected Package: kernel (Red Hat Enterprise Linux 6) - Not affected Package: kernel (Red Hat Enterprise Linux 7) - Not affected Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected Package: ke

GHSA

GHSA-vm8r-x97v-544j: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The l

ghsa_unreviewed·2026-05-01

CVE-2026-31773 [HIGH] GHSA-vm8r-x97v-544j: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The l In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder path in smp_random() currently labels the stored STK as authenticated whenever pending_sec_level is BT_SECURITY_HIGH. That reflects what the local service requested, not what the pairing flow actually achieved. For Just Works/Confirm legacy pairing, SMP_FLAG_MITM_AUTH stays clear and the resulting STK should remain unauthenticated even if the local side requested HIGH security. Use the established MITM state when storing the responder STK so the key metadata matches the pairing result. This also keeps the legacy path aligned with the Secure Connections code, which already treats JUST_WORKS/JUST_CFM as unauthenticated.

VulDB

Linux Kernel up to 6.19.11 smp_random channel accessible

vuldb·2026-05-01

CVE-2026-31773 [CRITICAL] Linux Kernel up to 6.19.11 smp_random channel accessible A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.19.11. Affected is the function smp_random. Performing a manipulation results in channel accessible by non-endpoint. This vulnerability is identified as CVE-2026-31773. The attack can only be performed from the local network. There is not any exploit available. It is advisable to upgrade the affected component.

CVE-2026-31773: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy…

Affected

CVSS provenance