{"id":"CVE-2026-44625","kind":"vulnerability","aliases":["CVE-2026-44625"],"related":[],"title":"Intel Wireless Bluetooth driver: use-after-free lets a local user crash the kernel","description":"Use after free for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.","summary":"A use-after-free bug in Intel Wireless Bluetooth driver code running in kernel mode can be triggered by a logged-in local user. The result is a denial of service that can take the machine down, with no confidentiality or integrity loss stated.","severity":"medium","cvss":6.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["bluetooth","infrastructure","intel","laptops","windows"],"not_affected_if":["no-intel-bluetooth-adapter","no-local-user-access"],"how_to_check":"- Check whether the machine has an Intel Wireless Bluetooth adapter and driver installed (Device Manager on Windows, or `lsmod` / `dmesg` on Linux)\n- Compare the installed driver version against the fixed version in Intel's advisory: unknown","fix":null,"status":"open","published_at":"2026-11-10T18:17:40+00:00","first_seen_at":"2026-11-10T18:22:58+00:00","triaged_at":"2026-11-10T18:24:42+00:00","updated_at":"2026-11-10T18:24:42+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T18:24:42Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Intel Wireless Bluetooth driver: use-after-free lets a local user crash the kernel","impact":"low","summary":"A use-after-free bug in Intel Wireless Bluetooth driver code running in kernel mode can be triggered by a logged-in local user. The result is a denial of service that can take the machine down, with no confidentiality or integrity loss stated.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["intel","windows","laptops","bluetooth"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"local user crashes the kernel, denying service to the machine","analyst_note":"Find Intel's security advisory for this CVE to confirm affected driver versions and the fixed version.","how_to_check":"- Check whether the machine has an Intel Wireless Bluetooth adapter and driver installed (Device Manager on Windows, or `lsmod` / `dmesg` on Linux)\n- Compare the installed driver version against the fixed version in Intel's advisory: unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-intel-bluetooth-adapter","no-local-user-access"],"who_is_affected":"Systems with Intel Wireless Bluetooth hardware and its kernel-mode driver installed are exposed. A local user with an account on the machine is needed to trigger it, and no special configuration is stated. Machines without that adapter or driver can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000745,"input_tokens":4651,"output_tokens":560,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':17A,20A '-44625':18A,21A '0':85C 'access':118C 'adversari':95C 'allow':88C 'attack':105C,120C 'authent':98C 'avail':145C,160C 'bluetooth':3A,22B,36B,81C 'bug':32B 'code':38B 'combin':100C 'complex':104C 'confidenti':68B,140C,155C 'crash':13A 'cve':16A,19A 'denial':57B,90C,108C 'driver':4A,37B 'enabl':107C 'free':8A,31B,75C 'high':146C 'impact':138C,162C 'infrastructur':23B 'integr':70B,142C,157C 'intel':1A,24B,34B,78C 'interact':133C 'intern':127C 'kernel':15A,41B,86C 'knowledg':128C 'laptop':25B 'let':9A 'local':11A,51B,117C 'log':49B 'logged-in':48B 'loss':71B 'low':103C 'machin':64B 'may':87C,106C,113C,137C 'mode':42B 'none':141C,143C,156C,158C,161C 'occur':115C 'potenti':114C,135C 'present':124C 'r':79C,82C 'requir':121C,130C 'result':54B,112C,151C 'ring':84C 'run':39B 'servic':59B,92C,110C 'softwar':94C 'special':126C 'state':72B 'subsequ':153C 'system':150C,154C 'take':62B 'trigger':45B 'unprivileg':93C 'use':6A,29B,73C 'use-after-fre':5A,28B 'user':12A,52B,99C,132C 'via':116C 'vulner':136C,149C 'window':26B 'wireless':2A,35B,80C 'within':83C 'without':125C","nicknames":[],"mitigations":[],"who_affected":"Systems with Intel Wireless Bluetooth hardware and its kernel-mode driver installed are exposed. A local user with an account on the machine is needed to trigger it, and no special configuration is stated. Machines without that adapter or driver can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["bluetooth","infrastructure","intel","laptops","medium","windows"],"campaign_type":null,"search_a":"'-2026':17A,20A '-44625':18A,21A 'bluetooth':3A 'crash':13A 'cve':16A,19A 'driver':4A 'free':8A 'intel':1A 'kernel':15A 'let':9A 'local':11A 'use':6A 'use-after-fre':5A 'user':12A 'wireless':2A","search_b":"'bluetooth':22B,36B 'bug':32B 'code':38B 'confidenti':68B 'denial':57B 'driver':37B 'free':31B 'infrastructur':23B 'integr':70B 'intel':24B,34B 'kernel':41B 'laptop':25B 'local':51B 'log':49B 'logged-in':48B 'loss':71B 'machin':64B 'mode':42B 'result':54B 'run':39B 'servic':59B 'state':72B 'take':62B 'trigger':45B 'use':29B 'use-after-fre':28B 'user':52B 'window':26B 'wireless':35B","search_c":"'0':85C 'access':118C 'adversari':95C 'allow':88C 'attack':105C,120C 'authent':98C 'avail':145C,160C 'bluetooth':81C 'combin':100C 'complex':104C 'confidenti':140C,155C 'denial':90C,108C 'enabl':107C 'free':75C 'high':146C 'impact':138C,162C 'integr':142C,157C 'intel':78C 'interact':133C 'intern':127C 'kernel':86C 'knowledg':128C 'local':117C 'low':103C 'may':87C,106C,113C,137C 'none':141C,143C,156C,158C,161C 'occur':115C 'potenti':114C,135C 'present':124C 'r':79C,82C 'requir':121C,130C 'result':112C,151C 'ring':84C 'servic':92C,110C 'softwar':94C 'special':126C 'subsequ':153C 'system':150C,154C 'unprivileg':93C 'use':73C 'user':99C,132C 'via':116C 'vulner':136C,149C 'wireless':80C 'within':83C 'without':125C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T18:17:40+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"secure@intel.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-44625","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-44625","severity":null,"published_at":"2026-11-10T18:17:40+00:00","modified_at":"2026-11-10T18:17:40+00:00","first_seen_at":"2026-11-10T18:22:58+00:00","fetched_at":"2026-11-10T18:22:58+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}