Every CVE Search/ Get API key

CVE-2021-41229

Memory leak in BlueZ

4.3 MediumFix available

BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

1.18%Up 0.8 points since Nov 13, 2021
90%50%10%1%

What each source reports

CVE List Score used 4.3

Memory leak in BlueZ

BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.

Record
CVE-2021-41229
CVSS 3.1
4.3 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-400
Updated
2026-11-02
EUVDEUVD-2021-28288 4.3

BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.

Record
EUVD-2021-28288
CVSS 3.1
4.3 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
NVD 4.3

BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.

Record
CVE-2021-41229
CVSS 3.1
4.3 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
3.3 LowAV:A/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-400, CWE-401
Updated
2026-11-02
OSV 6.5

BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.

Record
CVE-2021-41229
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-41229 6.5

BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.

Record
DEBIAN-CVE-2021-41229
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2022-1763 6.5

bluez security update

This package provides all utilities for use in Bluetooth applications. The BLUETOOTH trademarks are owned by Bluetooth SIG, Inc., U.S.A.

Security Fix(es):

BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.(CVE-2021-41229)

Record
OESA-2022-1763
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 11 moreShow less
OSVRHSA-2022:2081 4.3

Red Hat Security Advisory: bluez security update

Record
RHSA-2022:2081
CVSS 3.1
4.3 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVRLSA-2022:2081 4.3

Low: bluez security update

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (Rocky Enterprise Software Foundation), and pcmcia configuration files.

Security Fix(es):

  • bluez: memory leak in the SDP protocol (CVE-2021-41229)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.

Record
RLSA-2022:2081
CVSS 3.1
4.3 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2021-41229 4.3

BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.

Record
UBUNTU-CVE-2021-41229
CVSS 3.1
4.3 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2022:2081 No score

Low: bluez security update

The bluez packages contain the following utilities for use in Bluetooth applications: hcitool, hciattach, hciconfig, bluetoothd, l2ping, start scripts (AlmaLinux), and pcmcia configuration files.

Security Fix(es):

  • bluez: memory leak in the SDP protocol (CVE-2021-41229)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2022:2081
Updated
2026-11-02
OSVMGASA-2021-0532 No score

Updated bluez packages fix security vulnerability

BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash. (CVE-2021-41229)

An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D-Bus processing of a WriteValue call. (CVE-2021-43400)

Record
MGASA-2021-0532
Updated
2026-11-02
OSVSUSE-SU-2023:3238-1 No score

Security update for bluez

This update for bluez fixes the following issues:

  • CVE-2021-41229: Fix leaking buffers stored in cstates cache. (bsc#1192760)
Record
SUSE-SU-2023:3238-1
Updated
2026-11-02
OSVSUSE-SU-2023:3240-1 No score

Security update for bluez

This update for bluez fixes the following issues:

  • CVE-2021-41229: Fix leaking buffers stored in cstates cache. (bsc#1192760)
Record
SUSE-SU-2023:3240-1
Updated
2026-11-02
OSVSUSE-SU-2023:3689-1 No score

Security update for bluez

This update for bluez fixes the following issues:

  • CVE-2021-41229: Fixed leaking buffers stored in cstates cache (bsc#1192760).
Record
SUSE-SU-2023:3689-1
Updated
2026-11-02
OSVSUSE-SU-2024:0166-1 No score

Security update for bluez

This update for bluez fixes the following issues:

  • CVE-2021-41229: Fix leaking buffers stored in cstates cache (bsc#1192760).
  • CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation (bsc#1218300).
  • CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access Profile implementation (bsc#1218301).
Record
SUSE-SU-2024:0166-1
Updated
2026-11-02
OSVSUSE-SU-2024:0167-1 No score

Security update for bluez

This update for bluez fixes the following issues:

  • CVE-2021-41229: Fix leaking buffers stored in cstates cache (bsc#1192760).
  • CVE-2023-50229: Fixed an out of bounds write in the primary version counter for the Phone Book Access Profile implementation (bsc#1218300).
  • CVE-2023-50230: Fixed an out of bounds write in the secondary version counter for the Phone Book Access Profile implementation (bsc#1218301).
Record
SUSE-SU-2024:0167-1
Updated
2026-11-02
OSVUSN-5155-1 No score

bluez vulnerabilities

It was discovered that BlueZ incorrectly handled the Discoverable status when a device is powered down. This could result in devices being powered up discoverable, contrary to expectations. This issue only affected Ubuntu 20.04 LTS, Ubuntu 21.04, and Ubuntu 21.10. (CVE-2021-3658)

It was discovered that BlueZ incorrectly handled certain memory operations. A remote attacker could possibly use this issue to cause BlueZ to consume resources, leading to a denial of service. (CVE-2021-41229)

It was discovered that the BlueZ gatt server incorrectly handled disconnects. A remote attacker could possibly use this issue to cause BlueZ to crash, leading to a denial of service. (CVE-2021-43400)

Record
USN-5155-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bluez
AlmaLinux:8
 before 5.56-3.el8
5.56-3.el8
bluez-cups
AlmaLinux:8
 before 5.56-3.el8
5.56-3.el8
bluez-hid2hci
AlmaLinux:8
 before 5.56-3.el8
5.56-3.el8
bluez-libs
AlmaLinux:8
 before 5.56-3.el8
5.56-3.el8
bluez-libs-devel
AlmaLinux:8
 before 5.56-3.el8
5.56-3.el8
bluez-obexd
AlmaLinux:8
 before 5.56-3.el8
5.56-3.el8
bluez
Debian:12
 before 5.62-2
5.62-2
bluez
Debian:13
 before 5.62-2
5.62-2
bluez
Debian:14
 before 5.62-2
5.62-2
bluez
Debian:9
From an advisory covering 3 CVEs
 before 5.43-2+deb9u5, plus listed versions
5.43-25.43-2+deb9u15.43-2+deb9u25.43-2+deb9u2~deb8u15.43-2+deb9u35.43-2+deb9u4
5.43-2+deb9u5
Show 57 moreShow less
Affected packages
PackageAffectedFixed
bluez
Debian:10
From an advisory covering 7 CVEs
 before 5.50-1.2~deb10u3, plus listed versions
5.50-15.50-1.15.50-1.2~deb10u15.50-1.2~deb10u2
5.50-1.2~deb10u3
bluez
Debian:11
From an advisory covering 9 CVEs
 before 5.55-3.1+deb11u2, plus listed versions
5.55-3.15.55-3.1+deb11u1
5.55-3.1+deb11u2
bluez
Mageia:8
From an advisory covering 2 CVEs
 before 5.55-3.3.mga8
5.55-3.3.mga8
bluez
openEuler:20.03-LTS-SP1
 before 5.54-10.oe1
5.54-10.oe1
bluez
openEuler:20.03-LTS-SP3
 before 5.54-10.oe1
5.54-10.oe1
bluez
openEuler:22.03-LTS
 before 5.54-14.oe2203
5.54-14.oe2203
bluez-cups
Red Hat:enterprise_linux:8::appstream
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-cups-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-hid2hci-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-obexd-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:5.56-3.el8
0:5.56-3.el8
bluez
Red Hat:enterprise_linux:8::baseos
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-cups-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-hid2hci
Red Hat:enterprise_linux:8::baseos
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-hid2hci-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-libs
Red Hat:enterprise_linux:8::baseos
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-obexd
Red Hat:enterprise_linux:8::baseos
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-obexd-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-cups-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-hid2hci-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-libs-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-libs-devel
Red Hat:enterprise_linux:8::crb
 before 0:5.56-3.el8
0:5.56-3.el8
bluez-obexd-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:5.56-3.el8
0:5.56-3.el8
bluez
Rocky Linux:8
 before 0:5.56-3.el8
0:5.56-3.el8
bluez
SUSE:Linux Enterprise Micro 5.3
 before 5.62-150400.4.16.1
5.62-150400.4.16.1
bluez
SUSE:Linux Enterprise Micro 5.4
 before 5.62-150400.4.16.1
5.62-150400.4.16.1
bluez
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 5.62-150400.4.16.1
5.62-150400.4.16.1
bluez
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
 before 5.62-150400.4.16.1
5.62-150400.4.16.1
bluez
SUSE:Linux Enterprise Workstation Extension 15 SP4
 before 5.62-150400.4.16.1
5.62-150400.4.16.1
bluez
openSUSE:Leap Micro 5.3
 before 5.62-150400.4.16.1
5.62-150400.4.16.1
bluez
openSUSE:Leap Micro 5.4
 before 5.62-150400.4.16.1
5.62-150400.4.16.1
bluez
openSUSE:Leap 15.4
 before 5.62-150400.4.16.1
5.62-150400.4.16.1
bluez
SUSE:Manager Proxy 4.2
 before 5.55-150300.3.25.1
5.55-150300.3.25.1
bluez
SUSE:Manager Server 4.2
 before 5.55-150300.3.25.1
5.55-150300.3.25.1
bluez
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 5.13-5.42.2
5.13-5.42.2
bluez
SUSE:Linux Enterprise Server 12 SP5
 before 5.13-5.42.2
5.13-5.42.2
bluez
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 5.13-5.42.2
5.13-5.42.2
bluez
SUSE:Linux Enterprise Workstation Extension 12 SP5
 before 5.13-5.42.2
5.13-5.42.2
bluez
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 3 CVEs
 before 5.48-150000.5.54.1
5.48-150000.5.54.1
bluez
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 3 CVEs
 before 5.48-150000.5.54.1
5.48-150000.5.54.1
bluez
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 3 CVEs
 before 5.48-150000.5.54.1
5.48-150000.5.54.1
bluez
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 5.48-150200.13.30.1
5.48-150200.13.30.1
bluez
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 5.48-150200.13.30.1
5.48-150200.13.30.1
bluez
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 3 CVEs
 before 5.48-150200.13.30.1
5.48-150200.13.30.1
bluez
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
5.35-0ubuntu25.36-0ubuntu15.37-0ubuntu55.37-0ubuntu5.15.37-0ubuntu5.3
Show 6 moreShow less
5.37-0ubuntu5.3+esm15.37-0ubuntu5.3+esm25.37-0ubuntu5.3+esm35.37-0ubuntu5.3+esm45.37-0ubuntu5.3+esm55.37-0ubuntu5.3+esm6
 None known
bluez
Ubuntu:18.04:LTS
 before 5.48-0ubuntu3.6, plus listed versions
5.46-0ubuntu35.46-0ubuntu45.48-0ubuntu35.48-0ubuntu3.15.48-0ubuntu3.25.48-0ubuntu3.35.48-0ubuntu3.45.48-0ubuntu3.5
5.48-0ubuntu3.6
bluez
Ubuntu:20.04:LTS
 before 5.53-0ubuntu3.4, plus listed versions
5.50-0ubuntu45.51-0ubuntu15.51-0ubuntu25.52-0ubuntu15.52-0ubuntu2
Show 6 moreShow less
5.53-0ubuntu15.53-0ubuntu25.53-0ubuntu35.53-0ubuntu3.15.53-0ubuntu3.25.53-0ubuntu3.3
5.53-0ubuntu3.4
bluez
Ubuntu:22.04:LTS
 before 5.62-0ubuntu2, plus listed versions
5.60-0ubuntu25.62-0ubuntu1
5.62-0ubuntu2
bluez
Ubuntu:18.04:LTS
From an advisory covering 3 CVEs
 before 5.48-0ubuntu3.6, plus listed versions
5.46-0ubuntu35.46-0ubuntu45.48-0ubuntu35.48-0ubuntu3.15.48-0ubuntu3.25.48-0ubuntu3.35.48-0ubuntu3.45.48-0ubuntu3.5
5.48-0ubuntu3.6
bluez
Ubuntu:20.04:LTS
From an advisory covering 3 CVEs
 before 5.53-0ubuntu3.4, plus listed versions
5.50-0ubuntu45.51-0ubuntu15.51-0ubuntu25.52-0ubuntu15.52-0ubuntu2
Show 6 moreShow less
5.53-0ubuntu15.53-0ubuntu25.53-0ubuntu35.53-0ubuntu3.15.53-0ubuntu3.25.53-0ubuntu3.3
5.53-0ubuntu3.4

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-41229 is a medium vulnerability (CVSS 4.3) in Bluez, published November 12, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 67th percentile. Fixed in bluez 5.56-3.el8.

References

Show 29 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open