bluez — Vulnerabilities & Security Advisories 12

BlueZ serves as the official Linux kernel protocol stack for Bluetooth, enabling wireless communication across devices. Historically, it has been susceptible to remote code execution, denial-of-service, and privilege escalation vulnerabilities, often through flawed authentication or buffer handling in its protocol implementations. With 12 CVEs currently on record, security researchers have identified issues in its L2CAP, HCI, and service discovery layers. Notable incidents include flaws allowing unauthorized device pairing and connection hijacking, though no major widespread breaches have been publicly attributed to these vulnerabilities. The project maintains regular security updates, but its complex attack surface continues to present challenges for secure Bluetooth implementation in Linux environments.