CVE-2023-45866

What it actually does

Bluetooth HID Hosts may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection and accept HID keyboard reports without user interaction in the Central role to authorize access.

Why it matters to the business

Systems could be exposed to unauthorized input injection over Bluetooth, increasing risk of compromise in environments with high device connectivity and requiring urgent patching across affected deployments.

How an attack unfolds

An attacker positions a malicious HID peripheral nearby, establishes an encrypted Bluetooth connection to the host without authorization, and injects keyboard reports to execute commands or actions on the target.

How to fix it

Upgrade affected packages to the fixed commit c87588bf1e118095445ed0713f60866592b36ca1 in canonical/cloud-init (GIT).

How to confirm the fix worked

Verify the installed package version matches or exceeds the fixed commit c87588bf1e118095445ed0713f60866592b36ca1 and test that unauthorized HID connections are rejected.

Typical attack path

1. Locate vulnerable Bluetooth host
2. Spoof HID peripheral role to initiate connection
3. Complete encrypted pairing without user consent
4. Transmit crafted HID keyboard reports for injection

How to detect it

Review Bluetooth daemon logs and connection audit trails for unauthorized HID peripheral pairings or unexpected encrypted link establishments from unknown devices.

What your security team should do

• Apply the listed fixed commit immediately due to the 1033 days since publication
• Audit Bluetooth configurations for HID host permissions
• Monitor for unexpected Bluetooth pairing events