{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3abluezbluez/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:bluez:bluez:*:*:*:*:*:*:*:*"],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["bluez"],"_cs_severities":["medium"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["BlueZ"],"content_html":"\u003cp\u003eThe BlueZ Bluetooth stack for Linux contains a security vulnerability, identified as CVE-2024-8390, which can be exploited by a remote, unauthenticated attacker. The flaw allows for the initiation of a Denial of Service (DoS) attack, potentially causing the Bluetooth subsystem or the affected system to become unresponsive or crash. This issue is particularly relevant for Linux-based devices that have Bluetooth enabled and are reachable by unauthorized parties within physical range. Defenders should prioritize auditing the BlueZ version currently in use across their infrastructure and monitoring for updates from their respective Linux distributions, as this vulnerability represents a stable entry point for service disruption without requiring user interaction or prior credentials.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability poses a risk of service disruption for any Linux system utilizing the affected BlueZ versions. If an attack succeeds, the Bluetooth subsystem may become unusable, requiring a service restart or a full system reboot, which can impact availability in environments relying on Bluetooth for critical connectivity or local device management.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePrioritize updating the bluez package to the latest version provided by your Linux distribution security repositories to address CVE-2024-8390. Monitor system logs for repeated Bluetooth service failures or unusual crash patterns in the bluetoothd process.\u003c/p\u003e\n","date_modified":"2026-10-14T16:26:31Z","date_published":"2026-10-14T16:26:31Z","id":"https://feed.craftedsignal.io/briefs/2026-10-bluez-dos/","summary":"A vulnerability in the BlueZ Bluetooth stack allows a remote, unauthenticated attacker to trigger a denial-of-service condition on affected Linux systems.","title":"BlueZ Denial of Service Vulnerability","url":"https://feed.craftedsignal.io/briefs/2026-10-bluez-dos/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:bluez:bluez:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}