What’s Vulnerable › Vulnerabilities
CVE-2020-26558
- Severity: medium (CVSS 4.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-05-24 · updated 2026-06-17
- Weakness: CWE-287
Description
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authentication procedure) by reflection of the public key and the authentication evidence of the initiating device, potentially permitting this attacker to complete authenticated pairing with the responding device using the correct Passkey for the pairing session. The attack methodology determines the Passkey value one bit at a time.
Affected products
- Bluetooth Core Specification: from 2.1 through 5.2
- Debian Linux: 9.0
- Fedoraproject Fedora: 34
- Intel Ac 1550 Firmware: all versions
- Intel Ac 3165 Firmware: all versions
- Intel Ac 3168 Firmware: all versions
- Intel Ac 7265 Firmware: all versions
- Intel Ac 8260 Firmware: all versions
- Intel Ac 8265 Firmware: all versions
- Intel Ac 9260 Firmware: all versions
- Intel Ac 9461 Firmware: all versions
- Intel Ac 9462 Firmware: all versions
- Intel Ac 9560 Firmware: all versions
- Intel Ax1650 Firmware: all versions
- Intel Ax1675 Firmware: all versions
- Intel Ax200 Firmware: all versions
- Intel Ax201 Firmware: all versions
- Intel Ax210 Firmware: all versions
- Linux kernel: before 5.13 — fixed in 5.13
How to fix
Upgrade to a fixed version: Linux kernel 5.13. Check the vendor advisory for mitigations.
References
- https://kb.cert.org/vuls/id/799380
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
- https://lists.debian.org/debian-lts-announce/2021/06/msg00022.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSS6CTGE4UGTJLCOZOASDR3T3SLL6QJZ/
- https://security.gentoo.org/glsa/202209-16
- https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-security/reporting-security/
- https://www.debian.org/security/2021/dsa-4951
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00517.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.html
- https://kb.cert.org/vuls/id/799380
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
Get alerted when CVE-2020-26558 or the next vulnerability affects your stack