Bluetooth Security
The latest Bluetooth Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2026-63974: The Linux Bluetooth Flaw That Only Matters on Windows Under One Condition
On July 19, 2026, the Linux kernel maintainers published CVE-2026-63974, a high-severity vulnerability in the Bluetooth subsystem with a CVSS 3.1 base score of 8.8. The flaw resides in the kernel’s...
NVD Finally Catalogs Vulnerable Linux Kernels in MediaTek Bluetooth CVE-2026-46140
A long-running gap in the National Vulnerability Database’s configuration mapping for a serious Linux kernel flaw was finally closed on June 24, 2026, giving enterprise security teams the missing...
Microsoft Patches CVE-2026-45605 Windows Bluetooth Use-After-Free Flaw
Microsoft patched a critical elevation-of-privilege vulnerability in the Windows Bluetooth Service on June 9, 2026, closing a use-after-free bug that could allow attackers to gain SYSTEM-level...
CVE-2026-45836: The Linux Kernel Bluetooth Flaw That Windows Users Can't Ignore
On May 26, 2026, a null-pointer dereference in the Linux kernel's Bluetooth L2CAP subsystem hit the public vulnerability database as CVE-2026-45836. The bug itself is unglamorous—a missing safety...
CVE-2026-43019 Linux Bluetooth Bug: WSL2 Users at Risk, Patch Now
The National Vulnerability Database (NVD) published CVE-2026-43019 on May 1, 2026, revealing a high-severity use-after-free flaw in the Linux kernel’s Bluetooth subsystem. The vulnerability, rated...
Linux Kernel Bluetooth Zero-Day Exploits WSL2 and Azure VMs
A high-severity vulnerability in the Linux kernel’s Bluetooth stack, tracked as CVE-2026-31771, was publicly disclosed on May 1, 2026. The flaw exposes millions of devices—including those running...
Linux Bluetooth Data Race CVE-2026-43119: What Windows Users Need to Know About the hci_sync Fix
A critical vulnerability in the Linux kernel’s Bluetooth subsystem was published this week, and while it may sound like a purely Linux concern, Windows users—especially those running Windows...
CVE-2026-31500: Linux Intel Bluetooth Bug Triggers Kernel Crashes—And Microsoft Has an Advisory for It
A newly disclosed vulnerability in the Linux kernel’s Intel Bluetooth driver can crash systems or enable memory corruption attacks, with Microsoft quietly listing the flaw in its own security...
Critical Linux Bluetooth Bug Could Crash Your Laptop During Shutdown—Here’s the Fix
A race condition in the Linux kernel’s Intel Bluetooth driver can corrupt memory and crash your system during shutdown or error recovery. Microsoft has now listed the flaw, tracked as...
Zero Motorcycles Bluetooth Vulnerability Exposes Critical Firmware Flaw (CVE-2026-1354)
Zero Motorcycles has disclosed a critical Bluetooth vulnerability that could allow attackers to push malicious firmware updates to electric motorcycles. The flaw, tracked as CVE-2026-1354, affects...
Windows Bluetooth RFCOMM Driver Race Condition Exposes Kernel to Privilege Escalation Attacks
Microsoft has disclosed a critical kernel-level vulnerability in the Windows Bluetooth RFCOMM Protocol Driver that enables local privilege escalation attacks. CVE-2026-23671 represents a race...
Linux Bluetooth CVE-2025-21969: Kernel Use-After-Free Vulnerability Explained
A critical security vulnerability has been discovered in the Linux kernel's Bluetooth implementation, designated CVE-2025-21969, which exposes systems to potential kernel memory corruption attacks....