Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.2
CVE-2020-26558: BlueZ Bluetooth pairing can be intercepted, leading to privilege gain
CVE-2020-26558 · published 5 years ago
Summary
The Bluetooth stack (BlueZ) used in several Ubuntu Linux variants can be tricked by a man‑in‑the‑middle attacker during the pairing process, allowing the attacker to gain higher system rights without any user action. This weakness affects Ubuntu releases that include the listed BlueZ packages. Apply the latest security updates for BlueZ or upgrade to a patched version as soon as possible.
What to do
- Update canonical linux-aws to version 4.4.0-1099.104.
- Update canonical linux-azure to version 4.15.0-1121.134~14.04.1.
- Update canonical linux-lts-xenial to version 4.4.0-219.252~14.04.1.
- Update canonical bluez to version 5.37-0ubuntu5.3+esm1.
- Update canonical linux to version 4.4.0-219.252.
- Update canonical linux-aws to version 4.4.0-1135.149.
- Update canonical linux-aws-hwe to version 4.15.0-1109.116~16.04.1.
- Update canonical linux-azure to version 4.15.0-1121.134~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1106.120~16.04.1.
- Update canonical linux-hwe to version 4.15.0-151.157~16.04.1.
- Update canonical linux-kvm to version 4.4.0-1100.109.
- Update canonical linux-oracle to version 4.15.0-1078.86~16.04.1.
- Update canonical linux-fips to version 4.4.0-1069.75.
- Update canonical bluez to version 5.48-0ubuntu3.5.
- Update canonical linux to version 4.15.0-151.157.
- Update canonical linux-aws to version 4.15.0-1109.116.
- Update canonical linux-aws-5.4 to version 5.4.0-1054.57~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1121.134.
- Update canonical linux-azure-5.4 to version 5.4.0-1055.57~18.04.1.
- Update canonical linux-dell300x to version 4.15.0-1027.32.
- Update canonical linux-gcp-4.15 to version 4.15.0-1106.120.
- Update canonical linux-gcp-5.4 to version 5.4.0-1049.53~18.04.1.
- Update canonical linux-gke-5.4 to version 5.4.0-1049.52~18.04.1.
- Update canonical linux-gkeop-5.4 to version 5.4.0-1021.22~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-80.90~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1097.99.
- Update canonical linux-oracle to version 4.15.0-1078.86.
- Update canonical linux-oracle-5.4 to version 5.4.0-1052.56~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1041.45~18.04.1.
- Update canonical linux-raspi2 to version 4.15.0-1092.98.
- Update canonical linux-snapdragon to version 4.15.0-1109.118.
- Update canonical linux-aws-fips to version 4.15.0-2051.53.
- Update canonical linux-azure-fips to version 4.15.0-2033.37.
- Update canonical linux-fips to version 4.15.0-1066.75.
- Update canonical linux-gcp-fips to version 4.15.0-2016.18.
- Update canonical bluez to version 5.53-0ubuntu3.2.
- Update canonical linux to version 5.4.0-80.90.
- Update canonical linux-aws to version 5.4.0-1054.57.
- Update canonical linux-aws-5.11 to version 5.11.0-1016.17~20.04.1.
- Update canonical linux-aws-5.8 to version 5.8.0-1042.44~20.04.1.
- Update canonical linux-azure to version 5.4.0-1055.57.
- Update canonical linux-azure-5.11 to version 5.11.0-1013.14~20.04.1.
- Update canonical linux-azure-5.8 to version 5.8.0-1040.43~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1016.19.
- Update canonical linux-gcp to version 5.4.0-1049.53.
- Update canonical linux-gcp-5.11 to version 5.11.0-1017.19~20.04.1.
- Update canonical linux-gcp-5.8 to version 5.8.0-1039.41.
- Update canonical linux-gke to version 5.4.0-1049.52.
- Update canonical linux-gkeop to version 5.4.0-1021.22.
- Update canonical linux-hwe-5.11 to version 5.11.0-34.36~20.04.1.
- Update canonical linux-kvm to version 5.4.0-1044.46.
- Update canonical linux-oem-5.10 to version 5.10.0-1032.33.
- Update canonical linux-oracle to version 5.4.0-1052.56.
- Update canonical linux-oracle-5.11 to version 5.11.0-1016.17~20.04.1.
- Update canonical linux-oracle-5.8 to version 5.8.0-1038.39~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1041.45.
- Update canonical linux-riscv-5.11 to version 5.11.0-1017.18~20.04.1.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1114.123~20.04.1.
- Update canonical linux-aws-fips to version 5.4.0-1069.73+fips2.
- Update canonical linux-azure-fips to version 5.4.0-1073.76+fips1.
- Update canonical linux-fips to version 5.4.0-1031.36.
- Update canonical linux-gcp-fips to version 5.4.0-1067.71~20.04.1.
- Update google platform/system/bt to version 8.1:2021-06-05.
- Update google platform/system/bt to version 9:2021-06-05.
- Update google platform/system/bt to version 10:2021-06-05.
- Update google platform/system/bt to version 11:2021-06-05.
- Update debian bluez to version 5.55-3.1.
- Update debian linux to version 5.10.40-1.
- Update linux linux_kernel to version 5.13 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws |
< 4.4.0-1099.104 Fix: upgrade to 4.4.0-1099.104
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1121.134~14.04.1 Fix: upgrade to 4.15.0-1121.134~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial |
< 4.4.0-219.252~14.04.1 Fix: upgrade to 4.4.0-219.252~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | bluez |
< 5.37-0ubuntu5.3+esm1 Fix: upgrade to 5.37-0ubuntu5.3+esm1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux |
< 4.4.0-219.252 Fix: upgrade to 4.4.0-219.252
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws |
< 4.4.0-1135.149 Fix: upgrade to 4.4.0-1135.149
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1109.116~16.04.1 Fix: upgrade to 4.15.0-1109.116~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1121.134~16.04.1 Fix: upgrade to 4.15.0-1121.134~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1106.120~16.04.1 Fix: upgrade to 4.15.0-1106.120~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-151.157~16.04.1 Fix: upgrade to 4.15.0-151.157~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm |
< 4.4.0-1100.109 Fix: upgrade to 4.4.0-1100.109
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1078.86~16.04.1 Fix: upgrade to 4.15.0-1078.86~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips |
< 4.4.0-1069.75 Fix: upgrade to 4.4.0-1069.75
|
| Ubuntu:18.04:LTS | canonical | bluez |
< 5.48-0ubuntu3.5 Fix: upgrade to 5.48-0ubuntu3.5
|
| Ubuntu:18.04:LTS | canonical | linux |
< 4.15.0-151.157 Fix: upgrade to 4.15.0-151.157
|
| Ubuntu:18.04:LTS | canonical | linux-aws |
< 4.15.0-1109.116 Fix: upgrade to 4.15.0-1109.116
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1054.57~18.04.1 Fix: upgrade to 5.4.0-1054.57~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1121.134 Fix: upgrade to 4.15.0-1121.134
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1055.57~18.04.1 Fix: upgrade to 5.4.0-1055.57~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-dell300x |
< 4.15.0-1027.32 Fix: upgrade to 4.15.0-1027.32
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1106.120 Fix: upgrade to 4.15.0-1106.120
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1049.53~18.04.1 Fix: upgrade to 5.4.0-1049.53~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 |
< 5.4.0-1049.52~18.04.1 Fix: upgrade to 5.4.0-1049.52~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 |
< 5.4.0-1021.22~18.04.1 Fix: upgrade to 5.4.0-1021.22~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-80.90~18.04.1 Fix: upgrade to 5.4.0-80.90~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1097.99 Fix: upgrade to 4.15.0-1097.99
|
| Ubuntu:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1078.86 Fix: upgrade to 4.15.0-1078.86
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1052.56~18.04.1 Fix: upgrade to 5.4.0-1052.56~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1041.45~18.04.1 Fix: upgrade to 5.4.0-1041.45~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-raspi2 |
< 4.15.0-1092.98 Fix: upgrade to 4.15.0-1092.98
|
| Ubuntu:18.04:LTS | canonical | linux-snapdragon |
< 4.15.0-1109.118 Fix: upgrade to 4.15.0-1109.118
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2051.53 Fix: upgrade to 4.15.0-2051.53
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2033.37 Fix: upgrade to 4.15.0-2033.37
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1066.75 Fix: upgrade to 4.15.0-1066.75
|
Showing 50 of 117. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2016.18 Fix: upgrade to 4.15.0-2016.18
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | bluez |
< 5.53-0ubuntu3.2 Fix: upgrade to 5.53-0ubuntu3.2
|
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-80.90 Fix: upgrade to 5.4.0-80.90
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1054.57 Fix: upgrade to 5.4.0-1054.57
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 |
< 5.11.0-1016.17~20.04.1 Fix: upgrade to 5.11.0-1016.17~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 |
< 5.8.0-1042.44~20.04.1 Fix: upgrade to 5.8.0-1042.44~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1055.57 Fix: upgrade to 5.4.0-1055.57
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 |
< 5.11.0-1013.14~20.04.1 Fix: upgrade to 5.11.0-1013.14~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 |
< 5.8.0-1040.43~20.04.1 Fix: upgrade to 5.8.0-1040.43~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1016.19 Fix: upgrade to 5.4.0-1016.19
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1049.53 Fix: upgrade to 5.4.0-1049.53
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 |
< 5.11.0-1017.19~20.04.1 Fix: upgrade to 5.11.0-1017.19~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 |
< 5.8.0-1039.41 Fix: upgrade to 5.8.0-1039.41
|
| Ubuntu:20.04:LTS | canonical | linux-gke |
< 5.4.0-1049.52 Fix: upgrade to 5.4.0-1049.52
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1021.22 Fix: upgrade to 5.4.0-1021.22
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 |
< 5.11.0-34.36~20.04.1 Fix: upgrade to 5.11.0-34.36~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1044.46 Fix: upgrade to 5.4.0-1044.46
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 |
< 5.10.0-1032.33 Fix: upgrade to 5.10.0-1032.33
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1052.56 Fix: upgrade to 5.4.0-1052.56
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 |
< 5.11.0-1016.17~20.04.1 Fix: upgrade to 5.11.0-1016.17~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 |
< 5.8.0-1038.39~20.04.1 Fix: upgrade to 5.8.0-1038.39~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1041.45 Fix: upgrade to 5.4.0-1041.45
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 |
< 5.11.0-1017.18~20.04.1 Fix: upgrade to 5.11.0-1017.18~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1114.123~20.04.1 Fix: upgrade to 5.15.0-1114.123~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1069.73+fips2 Fix: upgrade to 5.4.0-1069.73+fips2
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1073.76+fips1 Fix: upgrade to 5.4.0-1073.76+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1031.36 Fix: upgrade to 5.4.0-1031.36
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1067.71~20.04.1 Fix: upgrade to 5.4.0-1067.71~20.04.1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Android | platform/system/bt |
>= 8.1:0, < 8.1:2021-06-05 >= 9:0, < 9:2021-06-05 >= 10:0, < 10:2021-06-05 >= 11:0, < 11:2021-06-05 Fix: upgrade to 8.1:2021-06-05
|
|
| Debian:12 | debian | bluez |
< 5.55-3.1 Fix: upgrade to 5.55-3.1
|
| Debian:12 | debian | linux |
< 5.10.40-1 Fix: upgrade to 5.10.40-1
|
| – | bluetooth | bluetooth_core_specification |
>= 2.1, <= 5.2 cpe:2.3:a:bluetooth:bluetooth_core_specification:*:*:*:*:*:*:*:* |
| – | fedoraproject | fedora |
34 cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* |
| – | debian | debian_linux |
9.0 cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
| – | linux | linux_kernel |
< 5.13 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | intel | ax210_firmware |
All versions
cpe:2.3:o:intel:ax210_firmware:-:*:*:*:*:*:*:* |
| – | intel | ax201_firmware |
All versions
cpe:2.3:o:intel:ax201_firmware:-:*:*:*:*:*:*:* |
| – | intel | ax200_firmware |
All versions
cpe:2.3:o:intel:ax200_firmware:-:*:*:*:*:*:*:* |
| – | intel | ac_9560_firmware |
All versions
cpe:2.3:o:intel:ac_9560_firmware:-:*:*:*:*:*:*:* |
| – | intel | ac_9462_firmware |
All versions
cpe:2.3:o:intel:ac_9462_firmware:-:*:*:*:*:*:*:* |
| – | intel | ac_9461_firmware |
All versions
cpe:2.3:o:intel:ac_9461_firmware:-:*:*:*:*:*:*:* |
| – | intel | ac_9260_firmware |
All versions
cpe:2.3:o:intel:ac_9260_firmware:-:*:*:*:*:*:*:* |
| – | intel | ac_8265_firmware |
All versions
cpe:2.3:o:intel:ac_8265_firmware:-:*:*:*:*:*:*:* |
| – | intel | ac_8260_firmware |
All versions
cpe:2.3:o:intel:ac_8260_firmware:-:*:*:*:*:*:*:* |
| – | intel | ac_3168_firmware |
All versions
cpe:2.3:o:intel:ac_3168_firmware:-:*:*:*:*:*:*:* |
| – | intel | ac_7265_firmware |
All versions
cpe:2.3:o:intel:ac_7265_firmware:-:*:*:*:*:*:*:* |
| – | intel | ac_3165_firmware |
All versions
cpe:2.3:o:intel:ac_3165_firmware:-:*:*:*:*:*:*:* |
| – | intel | ax1675_firmware |
All versions
cpe:2.3:o:intel:ax1675_firmware:-:*:*:*:*:*:*:* |
| – | intel | ax1650_firmware |
All versions
cpe:2.3:o:intel:ax1650_firmware:-:*:*:*:*:*:*:* |
| – | intel | ac_1550_firmware |
All versions
cpe:2.3:o:intel:ac_1550_firmware:-:*:*:*:*:*:*:* |
Original advisory text
In smp_process_pairing_public_key of smp_act.cc, there is a possible interception of Bluetooth pairing from an on-path attacker due to improperly used crypto. This could lead to remote escalation o...
In smp_process_pairing_public_key of smp_act.cc, there is a possible interception of Bluetooth pairing from an on-path attacker due to improperly used crypto. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
- https://source.android.com/security/bulletin/2021-06-01 Vendor Advisory
- https://ubuntu.com/security/CVE-2020-26558 Third Party Advisory
- https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-securit... Third Party Advisory
- https://kb.cert.org/vuls/id/799380 Third Party Advisory
- https://ubuntu.com/security/notices/USN-4989-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-4989-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5018-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5017-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5046-1 Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00517.... Third Party Advisory
- https://ubuntu.com/security/notices/USN-5050-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5299-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-5343-1 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2020-26558 Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html Mailing List Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html Mailing List Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/06/msg00022.html Mailing List Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro...
- https://security.gentoo.org/glsa/202209-16 Third Party Advisory
- https://www.bluetooth.com/learn-about-bluetooth/key-attributes/bluetooth-securit... Vendor Advisory
- https://www.debian.org/security/2021/dsa-4951 Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00520.... Third Party Advisory
- https://www.kb.cert.org/vuls/id/799380
- https://security-tracker.debian.org/tracker/CVE-2020-26558 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-287Improper Authentication
Timeline
Published1 Jun 2021
Updated4 Nov 2026
First seen17 Jun 2026
Sources
UBUNTU-CVE-2020-26558 · OSV
CVE-2020-26558 · NVD
ASB-A-174886838 · OSV
DEBIAN-CVE-2020-26558 · OSV
Track software like this
Free during beta