{"id":"CVE-2026-42056","kind":"vulnerability","aliases":["CVE-2026-42056"],"related":[],"title":"Intel Wireless Bluetooth driver: kernel stack overflow lets nearby attackers crash systems","description":"Stack-based buffer overflow for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"Some Intel Wireless Bluetooth drivers running in kernel mode (Ring 0) contain a stack-based buffer overflow. A nearby attacker without an account can crash the system, causing denial of service, and no user action is needed.","severity":"medium","cvss":6.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["bluetooth","infrastructure","intel","laptops","windows"],"not_affected_if":["no-intel-bluetooth-hardware"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T18:17:39+00:00","first_seen_at":"2026-11-10T18:22:58+00:00","triaged_at":"2026-11-10T18:24:55+00:00","updated_at":"2026-11-10T18:24:55+00:00","category":"infrastructure","confidence":0.55,"triage":{"at":"2026-11-10T18:24:55Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Intel Wireless Bluetooth driver: kernel stack overflow lets nearby attackers crash systems","impact":"medium","summary":"Some Intel Wireless Bluetooth drivers running in kernel mode (Ring 0) contain a stack-based buffer overflow. A nearby attacker without an account can crash the system, causing denial of service, and no user action is needed.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["intel","bluetooth","windows","laptops"],"confidence":0.55,"fix_status":"unknown","needs_auth":"no","worst_case":"system crashes via kernel memory corruption, denial of service only","analyst_note":"Find Intel's security advisory for this CVE to get affected driver versions and the fixed release; NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-42056.","how_to_check":"- unknown","plain_action":"","product_name":"Intel Wireless Bluetooth driver","needs_analyst":true,"not_affected_if":["no-intel-bluetooth-hardware"],"who_is_affected":"Machines with an affected Intel Wireless Bluetooth driver are exposed, reached through adjacent (nearby radio) access. The sources do not list affected driver versions or hardware, so whether a given machine is in scope is unknown.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000733,"input_tokens":4669,"output_tokens":532,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-42056':15A,18A '0':34B,76C 'access':109C 'account':47B 'action':59B 'adjac':108C 'adversari':86C 'allow':79C 'attack':10A,44B,96C,111C 'avail':135C,150C 'base':39B,64C 'bluetooth':3A,19B,27B,72C 'buffer':40B,65C 'caus':52B 'combin':91C 'complex':95C 'confidenti':130C,145C 'contain':35B 'crash':11A,49B 'cve':13A,16A 'denial':53B,81C,99C 'driver':4A,28B 'enabl':98C 'high':136C 'impact':128C,152C 'infrastructur':20B 'integr':132C,147C 'intel':1A,21B,25B,69C 'interact':123C 'intern':117C 'kernel':5A,31B,77C 'knowledg':118C 'laptop':22B 'let':8A 'low':94C 'may':78C,97C,104C,127C 'mode':32B 'nearbi':9A,43B 'need':61B 'none':131C,133C,146C,148C,151C 'occur':106C 'overflow':7A,41B,66C 'potenti':105C,125C 'present':114C 'r':70C,73C 'requir':112C,120C 'result':103C,141C 'ring':33B,75C 'run':29B 'servic':55B,83C,101C 'softwar':85C 'special':116C 'stack':6A,38B,63C 'stack-bas':37B,62C 'subsequ':143C 'system':12A,51B,140C,144C 'unauthent':89C 'unprivileg':84C 'user':58B,90C,122C 'via':107C 'vulner':126C,139C 'window':23B 'wireless':2A,26B,71C 'within':74C 'without':45B,115C","nicknames":[],"mitigations":[],"who_affected":"Machines with an affected Intel Wireless Bluetooth driver are exposed, reached through adjacent (nearby radio) access. The sources do not list affected driver versions or hardware, so whether a given machine is in scope is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["bluetooth","infrastructure","intel","laptops","medium","windows"],"campaign_type":null,"search_a":"'-2026':14A,17A '-42056':15A,18A 'attack':10A 'bluetooth':3A 'crash':11A 'cve':13A,16A 'driver':4A 'intel':1A 'kernel':5A 'let':8A 'nearbi':9A 'overflow':7A 'stack':6A 'system':12A 'wireless':2A","search_b":"'0':34B 'account':47B 'action':59B 'attack':44B 'base':39B 'bluetooth':19B,27B 'buffer':40B 'caus':52B 'contain':35B 'crash':49B 'denial':53B 'driver':28B 'infrastructur':20B 'intel':21B,25B 'kernel':31B 'laptop':22B 'mode':32B 'nearbi':43B 'need':61B 'overflow':41B 'ring':33B 'run':29B 'servic':55B 'stack':38B 'stack-bas':37B 'system':51B 'user':58B 'window':23B 'wireless':26B 'without':45B","search_c":"'0':76C 'access':109C 'adjac':108C 'adversari':86C 'allow':79C 'attack':96C,111C 'avail':135C,150C 'base':64C 'bluetooth':72C 'buffer':65C 'combin':91C 'complex':95C 'confidenti':130C,145C 'denial':81C,99C 'enabl':98C 'high':136C 'impact':128C,152C 'integr':132C,147C 'intel':69C 'interact':123C 'intern':117C 'kernel':77C 'knowledg':118C 'low':94C 'may':78C,97C,104C,127C 'none':131C,133C,146C,148C,151C 'occur':106C 'overflow':66C 'potenti':105C,125C 'present':114C 'r':70C,73C 'requir':112C,120C 'result':103C,141C 'ring':75C 'servic':83C,101C 'softwar':85C 'special':116C 'stack':63C 'stack-bas':62C 'subsequ':143C 'system':140C,144C 'unauthent':89C 'unprivileg':84C 'user':90C,122C 'via':107C 'vulner':126C,139C 'wireless':71C 'within':74C 'without':115C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T18:17:39+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-42056","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42056","severity":null,"published_at":"2026-11-10T18:17:39+00:00","modified_at":"2026-11-10T18:17:39+00:00","first_seen_at":"2026-11-10T18:22:58+00:00","fetched_at":"2026-11-10T18:22:58+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}