CVE-2026-43334

A flaw was found in the Linux kernel's Bluetooth Security Manager Protocol (SMP). An attacker could exploit this vulnerability during the Bluetooth pairing process by manipulating authentication requirements. This could lead to the selection of a weaker pairing method than intended, potentially allowing a remote attacker to conduct a Man-in-the-Middle (MITM) attack and intercept or alter communications between paired devices.

This vulnerability is rated as Moderate severity because an exploit requires an attacker to be within adjacent radio proximity during an active device pairing procedure. In enterprise environments and default server installations of Red Hat Enterprise Linux, Bluetooth adapters are uncommon and typically disabled, substantially reducing the practical exposure. Furthermore, the issue only affects systems configured to enforce high-security pairing policies against untrusted initiator requests.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.