# CVE-2020-26558: bluez: The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig,... CVE-2020-26558 is fixed in 10 products on 1 platform, first by bluetooth 5.48-0ubuntu3.5, released June 8, 2021. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2020-26558 - Priority: Routine - CVSS: 4.2 (Moderate) - EPSS: 0.0088 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jun 8, 2021 ## Description The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (Red Hat), and pcmcia configuration files. Security Fix(es): * bluez: Passkey Entry protocol of the Bluetooth Core is vulnerable to an impersonation attack (CVE-2020-26558) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | bluetooth Ubuntu 18.04.6 LTS (bionic) | 5.48-0ubuntu3.5 | [bluetooth 5.48-0ubuntu3.5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-bluetooth-5.48-0ubuntu3.5.md) | Jun 8, 2021 | | Linux | bluetooth Ubuntu 20.04 LTS (focal) | 5.53-0ubuntu3.2 | [bluetooth 5.53-0ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-bluetooth-5.53-0ubuntu3.2.md) | Jun 9, 2021 | | Linux | bluez RHEL 8 | 0:5.56-1.el8 | [RHSA-2021:4432](https://patchblox.com/security/data/fix/linux/rhsa-2021-4432.md) | Nov 9, 2021 | | Linux | bluez Ubuntu 18.04.6 LTS (bionic) | 5.48-0ubuntu3.5 | [bluez 5.48-0ubuntu3.5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-bluez-5.48-0ubuntu3.5.md) | Jun 8, 2021 | | Linux | bluez Ubuntu 20.04 LTS (focal) | 5.53-0ubuntu3.2 | [bluez 5.53-0ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-bluez-5.53-0ubuntu3.2.md) | Jun 9, 2021 | | Linux | bluez ol 8 | 0:5.56-1.el8 | [ELSA-2021-4432](https://patchblox.com/security/data/fix/linux/elsa-2021-4432.md) | Nov 24, 2021 | | Linux | bluez-cups RHEL 8 | 0:5.56-1.el8 | [RHSA-2021:4432](https://patchblox.com/security/data/fix/linux/rhsa-2021-4432.md) | Nov 9, 2021 | | Linux | bluez-cups Ubuntu 18.04.6 LTS (bionic) | 5.48-0ubuntu3.5 | [bluez-cups 5.48-0ubuntu3.5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-bluez-cups-5.48-0ubuntu3.5.md) | Jun 8, 2021 | | Linux | bluez-cups Ubuntu 20.04 LTS (focal) | 5.53-0ubuntu3.2 | [bluez-cups 5.53-0ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-bluez-cups-5.53-0ubuntu3.2.md) | Jun 9, 2021 | | Linux | bluez-cups ol 8 | 0:5.56-1.el8 | [ELSA-2021-4432](https://patchblox.com/security/data/fix/linux/elsa-2021-4432.md) | Nov 24, 2021 | | Linux | bluez-hcidump Ubuntu 18.04.6 LTS (bionic) | 5.48-0ubuntu3.5 | [bluez-hcidump 5.48-0ubuntu3.5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-bluez-hcidump-5.48-0ubuntu3.5.md) | Jun 8, 2021 | | Linux | bluez-hcidump Ubuntu 20.04 LTS (focal) | 5.53-0ubuntu3.2 | [bluez-hcidump 5.53-0ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-bluez-hcidump-5.53-0ubuntu3.2.md) | Jun 9, 2021 | | Linux | bluez-hid2hci RHEL 8 | 0:5.56-1.el8 | [RHSA-2021:4432](https://patchblox.com/security/data/fix/linux/rhsa-2021-4432.md) | Nov 9, 2021 | | Linux | bluez-hid2hci ol 8 | 0:5.56-1.el8 | [ELSA-2021-4432](https://patchblox.com/security/data/fix/linux/elsa-2021-4432.md) | Nov 24, 2021 | | Linux | bluez-libs RHEL 8 | 0:5.56-1.el8 | [RHSA-2021:4432](https://patchblox.com/security/data/fix/linux/rhsa-2021-4432.md) | Nov 9, 2021 | | Linux | bluez-libs ol 8 | 0:5.56-1.el8 | [ELSA-2021-4432](https://patchblox.com/security/data/fix/linux/elsa-2021-4432.md) | Nov 24, 2021 | | Linux | bluez-libs-devel RHEL 8 | 0:5.56-1.el8 | [RHSA-2021:4432](https://patchblox.com/security/data/fix/linux/rhsa-2021-4432.md) | Nov 9, 2021 | | Linux | bluez-libs-devel ol 8 | 0:5.56-1.el8 | [ELSA-2021-4432](https://patchblox.com/security/data/fix/linux/elsa-2021-4432.md) | Nov 24, 2021 | | Linux | bluez-obexd RHEL 8 | 0:5.56-1.el8 | [RHSA-2021:4432](https://patchblox.com/security/data/fix/linux/rhsa-2021-4432.md) | Nov 9, 2021 | | Linux | bluez-obexd Ubuntu 18.04.6 LTS (bionic) | 5.48-0ubuntu3.5 | [bluez-obexd 5.48-0ubuntu3.5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-bluez-obexd-5.48-0ubuntu3.5.md) | Jun 8, 2021 | | Linux | bluez-obexd Ubuntu 20.04 LTS (focal) | 5.53-0ubuntu3.2 | [bluez-obexd 5.53-0ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-bluez-obexd-5.53-0ubuntu3.2.md) | Jun 9, 2021 | | Linux | bluez-obexd ol 8 | 0:5.56-1.el8 | [ELSA-2021-4432](https://patchblox.com/security/data/fix/linux/elsa-2021-4432.md) | Nov 24, 2021 | | Linux | bluez-tests Ubuntu 18.04.6 LTS (bionic) | 5.48-0ubuntu3.5 | [bluez-tests 5.48-0ubuntu3.5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-bluez-tests-5.48-0ubuntu3.5.md) | Jun 8, 2021 | | Linux | bluez-tests Ubuntu 20.04 LTS (focal) | 5.53-0ubuntu3.2 | [bluez-tests 5.53-0ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-bluez-tests-5.53-0ubuntu3.2.md) | Jun 9, 2021 | | Linux | libbluetooth3 Ubuntu 18.04.6 LTS (bionic) | 5.48-0ubuntu3.5 | [libbluetooth3 5.48-0ubuntu3.5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libbluetooth3-5.48-0ubuntu3.5.md) | Jun 8, 2021 | | Linux | libbluetooth3 Ubuntu 20.04 LTS (focal) | 5.53-0ubuntu3.2 | [libbluetooth3 5.53-0ubuntu3.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libbluetooth3-5.53-0ubuntu3.2.md) | Jun 9, 2021 | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo