{"id":"CVE-2026-44382","kind":"vulnerability","aliases":["CVE-2026-44382"],"related":[],"title":"Intel Wireless Bluetooth driver: out-of-bounds read lets nearby attackers crash the kernel","description":"Out-of-bounds read for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"Some Intel Wireless Bluetooth drivers read memory outside their bounds in kernel mode (Ring 0). A nearby attacker can send crafted traffic to make the system deny service, with no login and no user action needed.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Intel Wireless Bluetooth for Windows","fixed":["24.50"],"affected":"< 24.50","ecosystem":"vendor"}],"ecosystems":[],"tags":["adjacent","bluetooth","infrastructure","intel","laptops","windows"],"not_affected_if":["bluetooth-disabled","no-intel-bluetooth"],"how_to_check":"On Windows, check Device Manager > Bluetooth > Intel(R) Wireless Bluetooth > Driver tab for the driver version; versions before 24.50 are affected per Intel. Applies to machines with Intel Wi-Fi/Bluetooth adapters (AC 9260/9461/9462/9560, AX201/AX210/AX211, BE200/BE201 and Killer equivalents) or integrated wireless on 10th-14th gen Core and Core Ultra processors. Intel does not say Linux or other OSes are affected.","fix":"Update Intel Wireless Bluetooth for Windows to version 24.50 or later (https://www.intel.com/content/www/us/en/download/18649/intel-wireless-bluetooth-for-windows-10-and-windows-11.html).","status":"open","published_at":"2026-11-10T18:17:39+00:00","first_seen_at":"2026-11-10T18:22:58+00:00","triaged_at":"2026-11-10T18:24:32+00:00","updated_at":"2026-11-10T18:28:01+00:00","category":"infrastructure","confidence":0.85,"triage":{"at":"2026-11-10T18:24:32Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Intel Wireless Bluetooth driver: out-of-bounds read lets nearby attackers crash the kernel","impact":"low","summary":"Some Intel Wireless Bluetooth drivers read memory outside their bounds in kernel mode (Ring 0). A nearby attacker can send crafted traffic to make the system deny service, with no login and no user action needed.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["intel","windows","laptops","bluetooth"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"kernel crash causes denial of service on the machine","analyst_note":"Check Intel's security advisory for affected driver versions and fixed releases; the NVD entry gives no product ranges.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-intel-bluetooth"],"who_is_affected":"Machines with an affected Intel Wireless Bluetooth driver installed. The sources do not list the affected driver versions or the exact hardware, so the affected set is unknown. Systems without Intel wireless Bluetooth hardware or with the driver removed are not exposed.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000702,"input_tokens":4660,"output_tokens":471,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check Intel's security advisory for affected driver versions and fixed releases; the NVD entry gives no product ranges.","search":"'-2026':17A,20A '-44382':18A,21A '0':47B,83C 'access':115C 'action':67B 'adjac':27B,114C 'adversari':92C 'allow':86C 'attack':12A,50B,102C,117C 'avail':142C,157C 'bluetooth':3A,24A,28B,36B,79C 'bound':8A,42B,72C 'combin':97C 'complex':101C 'confidenti':137C,152C 'craft':53B 'crash':13A 'cve':16A,19A 'deni':59B 'denial':88C,105C 'driver':4A,37B 'enabl':104C 'for':25A 'high':143C 'impact':135C,159C 'infrastructur':29B 'integr':139C,154C 'intel':1A,22A,30B,34B,76C 'interact':130C 'intern':124C 'kernel':15A,44B,84C 'knowledg':125C 'laptop':31B 'let':10A 'login':63B 'low':100C 'make':56B 'may':85C,103C,110C,134C 'memori':39B 'mode':45B 'nearbi':11A,49B 'need':68B 'network':91C 'none':138C,140C,153C,155C,158C 'occur':112C 'out-of-bound':5A,69C 'outsid':40B 'potenti':111C,132C 'present':121C 'r':77C,80C 'read':9A,38B,73C 'requir':118C,127C 'result':109C,148C 'ring':46B,82C 'send':52B 'servic':60B,90C,107C 'special':123C 'subsequ':150C 'system':58B,147C,151C 'traffic':54B 'unauthent':95C 'user':66B,96C,129C 'via':113C 'vulner':133C,146C 'window':32B 'windows':26A 'wireless':2A,23A,35B,78C 'within':81C 'without':122C","nicknames":[],"mitigations":[],"who_affected":"Windows laptops and desktops with Intel Wireless Bluetooth driver before version 24.50, covering discrete Intel Wi-Fi/Bluetooth adapters and integrated wireless on 10th to 14th generation Core and Core Ultra processors. An attacker within Bluetooth/adjacent range needs no login or user action, and can cause a denial of service (system crash). Systems without Intel Bluetooth hardware, or with Bluetooth disabled, can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T18:28:01Z","by":"analyst","doc":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html","run_id":2497},"products":{"at":"2026-11-10T18:28:01Z","by":"analyst","doc":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html","run_id":2497},"how_to_check":{"at":"2026-11-10T18:28:01Z","by":"analyst","doc":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html","run_id":2497},"who_affected":{"at":"2026-11-10T18:28:01Z","by":"analyst","doc":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html","run_id":2497}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["intelwirelessbluetoothforwindows","wirelessbluetoothforwindows"],"ptokens":["bluetooth","for","intel","windows","wireless"],"labels":["adjacent","bluetooth","high","infrastructure","intel","laptops","windows"],"campaign_type":null,"search_a":"'-2026':17A,20A '-44382':18A,21A 'attack':12A 'bluetooth':3A,24A 'bound':8A 'crash':13A 'cve':16A,19A 'driver':4A 'for':25A 'intel':1A,22A 'kernel':15A 'let':10A 'nearbi':11A 'out-of-bound':5A 'read':9A 'windows':26A 'wireless':2A,23A","search_b":"'0':47B 'action':67B 'adjac':27B 'attack':50B 'bluetooth':28B,36B 'bound':42B 'craft':53B 'deni':59B 'driver':37B 'infrastructur':29B 'intel':30B,34B 'kernel':44B 'laptop':31B 'login':63B 'make':56B 'memori':39B 'mode':45B 'nearbi':49B 'need':68B 'outsid':40B 'read':38B 'ring':46B 'send':52B 'servic':60B 'system':58B 'traffic':54B 'user':66B 'window':32B 'wireless':35B","search_c":"'0':83C 'access':115C 'adjac':114C 'adversari':92C 'allow':86C 'attack':102C,117C 'avail':142C,157C 'bluetooth':79C 'bound':72C 'combin':97C 'complex':101C 'confidenti':137C,152C 'denial':88C,105C 'enabl':104C 'high':143C 'impact':135C,159C 'integr':139C,154C 'intel':76C 'interact':130C 'intern':124C 'kernel':84C 'knowledg':125C 'low':100C 'may':85C,103C,110C,134C 'network':91C 'none':138C,140C,153C,155C,158C 'occur':112C 'out-of-bound':69C 'potenti':111C,132C 'present':121C 'r':77C,80C 'read':73C 'requir':118C,127C 'result':109C,148C 'ring':82C 'servic':90C,107C 'special':123C 'subsequ':150C 'system':147C,151C 'unauthent':95C 'user':96C,129C 'via':113C 'vulner':133C,146C 'wireless':78C 'within':81C 'without':122C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T18:17:39+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-44382","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44382","severity":null,"published_at":"2026-11-10T18:17:39+00:00","modified_at":"2026-11-10T18:17:39+00:00","first_seen_at":"2026-11-10T18:22:58+00:00","fetched_at":"2026-11-10T18:22:58+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-44382:2497","url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html","severity":null,"published_at":"2026-11-10T18:28:01+00:00","modified_at":"2026-11-10T18:28:01+00:00","first_seen_at":"2026-11-10T18:28:01+00:00","fetched_at":"2026-11-10T18:28:01+00:00","note":"Intel INTEL-SA-01530 (primary, released 2026-11-10) lists CVE-2026-44382 as OOB read in Ring 0, CVSS4 7.1, fix: Bluetooth 24.50+. No exploitation or PoC checked beyond advisory; X/social not searched. Sibling CVE-2026-42956 (OOB write) same advisory.","cites":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html"]}],"documents":[{"id":117068,"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01530.html","title":"INTEL-SA-01530 Intel PROSet/Wireless WiFi and Wireless Bluetooth Advisory","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}