{"id":"CVE-2026-42956","kind":"vulnerability","aliases":["CVE-2026-42956"],"related":[],"title":"Intel Wireless Bluetooth driver: out-of-bounds write can crash the kernel","description":"Out-of-bounds write for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"An out-of-bounds memory write in some Intel Wireless Bluetooth drivers, running in kernel mode, can be triggered from nearby over the adjacent network. The result is a denial of service that can take the machine down, with no confidentiality or integrity impact stated.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Intel Wireless Bluetooth","fixed":["24.50"],"affected":"< 24.50","ecosystem":"vendor"}],"ecosystems":[],"tags":["adjacent-network","bluetooth","infrastructure","intel","laptops","windows"],"not_affected_if":["no-intel-bluetooth-adapter"],"how_to_check":"On Windows, open Device Manager > Bluetooth > Intel(R) Wireless Bluetooth(R) > Properties > Driver and read the driver version. Versions before 24.50 are affected. No Intel Wireless Bluetooth adapter means not affected.","fix":"Update Intel Wireless Bluetooth for Windows to version 24.50 or later (Intel download: https://www.intel.com/content/www/us/en/download/18649/intel-wireless-bluetooth-for-windows-10-and-windows-11.html)","status":"open","published_at":"2026-11-10T18:17:39+00:00","first_seen_at":"2026-11-10T18:22:58+00:00","triaged_at":"2026-11-10T18:24:33+00:00","updated_at":"2026-11-10T18:28:04+00:00","category":"infrastructure","confidence":0.85,"triage":{"at":"2026-11-10T18:24:33Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Intel Wireless Bluetooth driver: out-of-bounds write can crash the kernel","impact":"medium","summary":"An out-of-bounds memory write in some Intel Wireless Bluetooth drivers, running in kernel mode, can be triggered from nearby over the adjacent network. The result is a denial of service that can take the machine down, with no confidentiality or integrity impact stated.","audience":"everyone","category":"infrastructure","nicknames":[],"who_cares":["intel","bluetooth","windows","laptops"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Kernel crash causes denial of service on the affected machine","analyst_note":"Find Intel's security advisory for CVE-2026-42956 to get affected driver versions and the fixed driver version.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-intel-bluetooth-adapter"],"who_is_affected":"Machines with an Intel Wireless Bluetooth adapter and the affected Intel Bluetooth driver installed are exposed, as the sources describe a flaw in that driver running in kernel mode. The sources do not name the affected driver versions or say which systems are most exposed. Systems without an Intel Wireless Bluetooth adapter are not affected.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000722,"input_tokens":4660,"output_tokens":511,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find Intel's security advisory for CVE-2026-42956 to get affected driver versions and the fixed driver version.","search":"'-2026':15A,18A '-42956':16A,19A '0':91C 'access':123C 'adjac':24B,55B,122C 'adjacent-network':23B 'adversari':100C 'allow':94C 'attack':110C,125C 'avail':150C,165C 'bluetooth':3A,22A,26B,42B,87C 'bound':8A,35B,80C 'combin':105C 'complex':109C 'confidenti':72B,145C,160C 'crash':11A 'cve':14A,17A 'denial':61B,96C,113C 'driver':4A,43B 'enabl':112C 'high':151C 'impact':75B,143C,167C 'infrastructur':27B 'integr':74B,147C,162C 'intel':1A,20A,28B,40B,84C 'interact':138C 'intern':132C 'kernel':13A,46B,92C 'knowledg':133C 'laptop':29B 'low':108C 'machin':68B 'may':93C,111C,118C,142C 'memori':36B 'mode':47B 'nearbi':52B 'network':25B,56B,99C 'none':146C,148C,161C,163C,166C 'occur':120C 'out-of-bound':5A,32B,77C 'potenti':119C,140C 'present':129C 'r':85C,88C 'requir':126C,135C 'result':58B,117C,156C 'ring':90C 'run':44B 'servic':63B,98C,115C 'special':131C 'state':76B 'subsequ':158C 'system':155C,159C 'take':66B 'trigger':50B 'unauthent':103C 'user':104C,137C 'via':121C 'vulner':141C,154C 'window':30B 'wireless':2A,21A,41B,86C 'within':89C 'without':130C 'write':9A,37B,81C","nicknames":[],"mitigations":[],"who_affected":"Windows PCs with an Intel Wireless Bluetooth adapter and a driver older than 24.50 are exposed. Intel lists integrated wireless on 10th to 14th generation Core, Core Ultra Series 1 and 2, and related Pentium and Celeron processors, plus discrete AC 9260 to Wi-Fi 7 BE201 adapters. An attacker within Bluetooth range needs no login or user action and can crash the machine (denial of service). Machines without an Intel Bluetooth adapter can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T18:28:04Z","by":"analyst","doc":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html","run_id":2498},"products":{"at":"2026-11-10T18:28:04Z","by":"analyst","doc":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html","run_id":2498},"how_to_check":{"at":"2026-11-10T18:28:04Z","by":"analyst","doc":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html","run_id":2498},"who_affected":{"at":"2026-11-10T18:28:04Z","by":"analyst","doc":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html","run_id":2498}},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update the Intel Bluetooth driver on your Windows laptop to version 24.50 or newer, using your PC maker's update tool or Intel's driver download page.","pkeys":["intelwirelessbluetooth","wirelessbluetooth"],"ptokens":["bluetooth","intel","wireless"],"labels":["adjacentnetwork","bluetooth","high","infrastructure","intel","laptops","windows"],"campaign_type":null,"search_a":"'-2026':15A,18A '-42956':16A,19A 'bluetooth':3A,22A 'bound':8A 'crash':11A 'cve':14A,17A 'driver':4A 'intel':1A,20A 'kernel':13A 'out-of-bound':5A 'wireless':2A,21A 'write':9A","search_b":"'adjac':24B,55B 'adjacent-network':23B 'bluetooth':26B,42B 'bound':35B 'confidenti':72B 'denial':61B 'driver':43B 'impact':75B 'infrastructur':27B 'integr':74B 'intel':28B,40B 'kernel':46B 'laptop':29B 'machin':68B 'memori':36B 'mode':47B 'nearbi':52B 'network':25B,56B 'out-of-bound':32B 'result':58B 'run':44B 'servic':63B 'state':76B 'take':66B 'trigger':50B 'window':30B 'wireless':41B 'write':37B","search_c":"'0':91C 'access':123C 'adjac':122C 'adversari':100C 'allow':94C 'attack':110C,125C 'avail':150C,165C 'bluetooth':87C 'bound':80C 'combin':105C 'complex':109C 'confidenti':145C,160C 'denial':96C,113C 'enabl':112C 'high':151C 'impact':143C,167C 'integr':147C,162C 'intel':84C 'interact':138C 'intern':132C 'kernel':92C 'knowledg':133C 'low':108C 'may':93C,111C,118C,142C 'network':99C 'none':146C,148C,161C,163C,166C 'occur':120C 'out-of-bound':77C 'potenti':119C,140C 'present':129C 'r':85C,88C 'requir':126C,135C 'result':117C,156C 'ring':90C 'servic':98C,115C 'special':131C 'subsequ':158C 'system':155C,159C 'unauthent':103C 'user':104C,137C 'via':121C 'vulner':141C,154C 'wireless':86C 'within':89C 'without':130C 'write':81C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T18:17:39+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-42956","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42956","severity":null,"published_at":"2026-11-10T18:17:39+00:00","modified_at":"2026-11-10T18:17:39+00:00","first_seen_at":"2026-11-10T18:22:58+00:00","fetched_at":"2026-11-10T18:22:58+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-42956:2498","url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html","severity":null,"published_at":"2026-11-10T18:28:04+00:00","modified_at":"2026-11-10T18:28:04+00:00","first_seen_at":"2026-11-10T18:28:04+00:00","fetched_at":"2026-11-10T18:28:04+00:00","note":"Read Intel INTEL-SA-01530 (released 2026-11-10): CVE-2026-42956 affects Intel Wireless Bluetooth before 24.50 on Windows; fix is 24.50 or later. Intel does not mention exploitation or PoC; I did not search X or posts for chatter.","cites":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html"]}],"documents":[{"id":117068,"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html","title":"INTEL-SA-01530 Intel PROSet/Wireless WiFi and Wireless Bluetooth Advisory","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}