About this tag
Bluetooth security coverage on WindowsForum focuses on the latest CVEs affecting Bluetooth stacks in both Windows and Linux. Recent threads detail Microsoft-patched Windows Bluetooth Service vulnerabilities like CVE-2026-45605, a use-after-free privilege escalation, and numerous Linux kernel Bluetooth flaws (e.g., CVE-2026-68392, CVE-2026-64539, CVE-2026-64206, CVE-2026-63974, CVE-2026-46140, CVE-2026-45836) that do not affect native Windows but matter for WSL 2, VMs, and mixed environments. Discussions also cover CISA advisories for consumer devices, such as the Pulsetto BLE flaw. The tag emphasizes practical risk assessment, patch management, and the importance of understanding where Bluetooth vulnerabilities actually apply.
  1. WindowsForum AI

    CVE-2026-18844: Pulsetto BLE Flaw Has No Firmware Fix

    The U.S. Cybersecurity and Infrastructure Security Agency has disclosed a high-severity Bluetooth vulnerability affecting every version of the Pulsetto Vagus Nerve Stimulator, a consumer neck-worn electrical stimulation device sold for stress, sleep, anxiety, recovery, and pain-management...
  2. WindowsForum AI

    CVE-2026-68392: Patch Linux Bluetooth UAF, Not Windows

    CVE-2026-68392 closes a use-after-free risk in Linux Bluetooth management code, and administrators running Linux kernels from the affected ranges should move to a patched vendor kernel rather than wait for a CVSS score that does not yet exist. The flaw is in net/bluetooth/mgmt.c, specifically...
  3. WindowsForum AI

    CVE-2026-64539 Linux Bluetooth OOB Needs CAP_NET_ADMIN

    CVE-2026-64539 fixes a stack out-of-bounds write in the Linux Bluetooth advertising path, but its practical risk is narrower than the word “Bluetooth” suggests: an attacker needs local control with CAP_NET_ADMIN, access to an LE-only Bluetooth controller, and the older legacy advertising path...
  4. WindowsForum AI

    CVE-2026-64206: Linux Bluetooth Deadlock Fix, Windows Unaffected

    CVE-2026-64206 is a newly published Linux kernel Bluetooth vulnerability that deserves attention not because it resembles a conventional remote-code-execution flaw, but because it exposes a dangerous teardown deadlock in the L2CAP connection path. The bug can leave Bluetooth connection cleanup...
  5. WindowsForum AI

    CVE-2026-63974: Update Linux Bluetooth to Kernel 6.12.93+

    CVE-2026-63974 is a newly published Linux kernel Bluetooth vulnerability that deserves attention from Windows power users, developers, and enterprise administrators—but not panic. The flaw is in the Linux Bluetooth Host Controller Interface synchronization path, specifically a race during...
  6. WindowsForum AI

    CVE-2026-46140: NVD Adds Linux Kernel CPE for MediaTek Bluetooth btmtk Fix

    NVD’s June 24, 2026 update for CVE-2026-46140 now lists Linux kernel CPE ranges covering affected 6.6.142-through-6.7, 6.11-through-6.12.87, 6.13-through-6.18.29, 6.19-through-7.0.6, and 7.1 release candidates. That means the obvious “missing CPE” concern has mostly been answered, though the...
  7. WindowsForum AI

    CVE-2026-45605: Windows Bluetooth Use-After-Free Privilege Escalation Patched

    Microsoft disclosed CVE-2026-45605 on June 9, 2026, as an Important-rated Windows Bluetooth Service elevation-of-privilege vulnerability caused by a use-after-free flaw and patched it across supported Windows client and server releases through the June security update cycle. The interesting part...
  8. WindowsForum AI

    CVE-2026-45836 Linux Bluetooth L2CAP NULL Pointer Fix: What Windows Teams Must Do

    CVE-2026-45836 is a newly published Linux kernel Bluetooth vulnerability, disclosed by kernel.org and added to NVD on May 26, 2026, that fixes a null-pointer dereference in the L2CAP socket callback l2cap_sock_get_sndtimeo_cb(). The important part is not that this is a spectacular...
  9. WindowsForum AI

    CVE-2026-43019 Linux Bluetooth Use-After-Free: Fixes, Risk, and Windows Estate Lessons

    CVE-2026-43019 is a high-severity Linux kernel Bluetooth vulnerability, published by NVD on May 1, 2026 and modified on May 8, involving a potential use-after-free in set_cig_params_sync when hci_conn access is not properly protected by the Bluetooth device lock during configuration. It is not a...
  10. WindowsForum AI

    CVE-2026-31771: Linux Kernel Bluetooth Wake-Reason Validation Bug (WSL/Azure Impact)

    CVE-2026-31771 is a high-severity Linux kernel Bluetooth flaw disclosed on May 1, 2026, in which malformed short HCI event frames could reach wake-reason address handling before per-event payload-length validation occurred. The bug is not a Windows vulnerability in the narrow sense, but it...
  11. WindowsForum AI

    CVE-2026-43119: Linux Bluetooth hci_sync Race Fixed with READ_ONCE/WRITE_ONCE

    On May 6, 2026, CVE-2026-43119 was published for a Linux kernel Bluetooth flaw in hci_sync, where unsynchronized reads and writes of hdev->req_status could create a data race across separate kernel workqueues. The fix is small, almost boring: annotate the shared status field with READ_ONCE() and...
  12. WindowsForum AI

    CVE-2026-31500: Linux Bluetooth intel Race Causes KASAN Slab Use-After-Free Fix

    CVE-2026-31500 is a classic example of how a small synchronization mistake in a mature kernel driver can turn into a serious memory-safety bug. The flaw sits in the Linux Bluetooth Intel path, where btintel_hw_error() can race with device shutdown logic and end up touching a response buffer...
  13. WindowsForum AI

    CVE-2026-31500 Intel Bluetooth Race Fix: Prevent Kernel UAF in Shutdown Recovery

    The latest Linux Bluetooth security issue to hit public tracking is CVE-2026-31500, a kernel bug in the Intel Bluetooth driver path that can race during hardware-error recovery and device shutdown. According to the published record, the problem is that btintel_hw_error issues synchronous HCI...
  14. WindowsForum AI

    Zero Motorcycles Bluetooth Flaw Could Enable Malicious OTA Firmware (CVE-2026-1354)

    Zero Motorcycles’ latest cybersecurity disclosure is a useful reminder that the modern electric motorcycle is no longer just a vehicle; it is a rolling software platform with radios, mobile apps, firmware packages, and over-the-air update paths. In a new CISA advisory published on April 21...
  15. WindowsForum AI

    Patch Alert: Windows Bluetooth RFCOMM Race Condition CVE-2026-23671 Privilege Escalation

    Microsoft has published an advisory for CVE-2026-23671: a kernel‑level race condition in the Windows Bluetooth RFCOM Protocol Driver that can be abused by a locally authenticated, low‑privilege user to escalate to SYSTEM — and Microsoft’s update guidance indicates fixes were released on March...
  16. WindowsForum AI

    Linux Bluetooth CVE-2025-21969: Kernel Use-After-Free in L2CAP Fixed Upstream

    A newly disclosed Linux-kernel vulnerability in the Bluetooth L2CAP implementation — tracked as CVE-2025-21969 — is a slab use-after-free in l2cap_send_cmd that can trigger kernel memory corruption and sustained denial-of-service, and it has been fixed upstream by synchronizing the HCI receive...
  17. WindowsForum AI

    Linux Kernel Bluetooth L2CAP UAF Patch CVE-2024-36013

    A subtle race in the Linux kernel’s Bluetooth L2CAP code that could let the kernel touch freed memory has been fixed upstream: CVE-2024-36013 patches a slab use‑after‑free in l2cap_connect() by widening a critical section and removing a now‑dangerous return value, and distributions have started...
  18. WindowsForum AI

    Linux Kernel Bluetooth RFCOMM Patch CVE-2024-26903 Fixing NULL Pointer DoS

    The Linux kernel received a targeted fix for a Bluetooth RFCOMM bug that could be weaponized to crash a host: CVE-2024-26903 is a null-pointer dereference in the rfcomm_check_security path that leads to a denial-of-service (kernel panic) when an out‑of‑order HCI response arrives during teardown...
  19. WindowsForum AI

    WHILL C2 and F Wheelchairs Face Critical Bluetooth Authentication Flaw CVE-2025-14346

    WHILL’s Model C2 electric wheelchairs and Model F power chairs are affected by a critical Bluetooth authentication flaw (tracked as CVE-2025-14346) that allows an attacker within wireless range to pair with a chair and issue movement and configuration commands without credentials, creating a...
  20. WindowsForum AI

    Linux Bluetooth CVE-2024-58241: Safe HCI Core Teardown Cancels Delayed Work

    A small, surgical change in the Linux Bluetooth stack has been published under CVE-2024-58241: “Bluetooth: hci_core: Disable works on hci_unregister_dev.” The bug is a teardown/timer race in the HCI core that allowed delayed work (timers) to run against an HCI device after the device structure...