Intel Wireless Bluetooth: Stack-based buffer overflow in kernel driver
Summary
A stack-based buffer overflow in some Intel Wireless Bluetooth drivers running in kernel mode (Ring 0) can be triggered by an attacker in Bluetooth range or on the adjacent network. The attack requires low complexity and no user interaction, and the CVE record states no confidentiality or integrity impact. The likely result is a denial of service, such as a system crash or reboot.
Affected
- Intel Wireless Bluetooth drivers (exact product and version list: Unknown; see Intel advisory INTEL-SA-01530)
Fixed in
- Unknown. The Intel advisory INTEL-SA-01530 must be checked for the fixed driver versions per adapter.
Workaround
- No vendor workaround confirmed.
- Disable Bluetooth on devices where it is not required, as a temporary measure.
Exploitation
- Not known to be exploited in the wild (OffSeq). CISA KEV: not listed according to Strix.
- VulDB states that no public technical details or exploit are available.
Our recommendation
- Open Intel advisory INTEL-SA-01530 and record the affected and fixed Bluetooth driver versions for your devices.
- Inventory Intel Wi-Fi/Bluetooth adapters, prioritising mobile devices used in public or shared spaces.
- Install the newest Intel or OEM Bluetooth driver once a fix is confirmed; OEM packages may lag behind Intel.
- Check whether older adapters (e.g. AX200-class) are on an end-of-life driver track, as no fix may be provided for them.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Intel advisory INTEL-SA-01530 intel.com
- Intel Security Center www.intel.com
- VulDB CVE-2026-42056 vuldb.com
- OffSeq threat radar CVE-2026-42056 radar.offseq.com
- Strix CVE-2026-42056 www.strix.ai
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 11 Nov 2026, 14:51.
Original description (NVD)
Stack-based buffer overflow for some Intel(R) Wireless Bluetooth(R) within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via adjacent access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.