Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux BlueZ may crash or allow code execution
published 15 days ago
Summary
The BlueZ Bluetooth stack packages on AlmaLinux (including bluez, bluez-cups, bluez-hid2hci, bluez-libs, and bluez-libs-devel) contain several bugs that could let a malicious Bluetooth device cause a crash or run unwanted code. Updating to the latest patched version removes these flaws and restores normal, safe operation. Apply the newest AlmaLinux updates for all BlueZ packages as soon as possible.
What to do
- Update almalinux bluez to version 5.72-4.el9.tuxcare.els2.
- Update almalinux bluez-cups to version 5.72-4.el9.tuxcare.els2.
- Update almalinux bluez-hid2hci to version 5.72-4.el9.tuxcare.els2.
- Update almalinux bluez-libs to version 5.72-4.el9.tuxcare.els2.
- Update almalinux bluez-libs-devel to version 5.72-4.el9.tuxcare.els2.
- Update almalinux bluez-mesh to version 5.72-4.el9.tuxcare.els2.
- Update almalinux bluez-obexd to version 5.72-4.el9.tuxcare.els2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.2 | almalinux | bluez |
< 5.72-4.el9.tuxcare.els2 Fix: upgrade to 5.72-4.el9.tuxcare.els2
|
| TuxCare:AlmaLinux:9.2 | almalinux | bluez-cups |
< 5.72-4.el9.tuxcare.els2 Fix: upgrade to 5.72-4.el9.tuxcare.els2
|
| TuxCare:AlmaLinux:9.2 | almalinux | bluez-hid2hci |
< 5.72-4.el9.tuxcare.els2 Fix: upgrade to 5.72-4.el9.tuxcare.els2
|
| TuxCare:AlmaLinux:9.2 | almalinux | bluez-libs |
< 5.72-4.el9.tuxcare.els2 Fix: upgrade to 5.72-4.el9.tuxcare.els2
|
| TuxCare:AlmaLinux:9.2 | almalinux | bluez-libs-devel |
< 5.72-4.el9.tuxcare.els2 Fix: upgrade to 5.72-4.el9.tuxcare.els2
|
| TuxCare:AlmaLinux:9.2 | almalinux | bluez-mesh |
< 5.72-4.el9.tuxcare.els2 Fix: upgrade to 5.72-4.el9.tuxcare.els2
|
| TuxCare:AlmaLinux:9.2 | almalinux | bluez-obexd |
< 5.72-4.el9.tuxcare.els2 Fix: upgrade to 5.72-4.el9.tuxcare.els2
|
Original advisory text
bluez: Fix of 5 CVEs
- CVE-2026-19774: fix stack-based buffer overflow in A2DP remote stream endpoint
codec capability storage and validate cached capabilities on load
- CVE-2026-75032: fix out-of-bounds read in AVRCP GetFolderItems response parsing
by bounding media item and folder names to the received packet length
- CVE-2026-80185: fix type confusion crash in SDP XML record parsing by rejecting
nested attributes and mismatched sequence/alternate closing elements
- CVE-2026-80186: fix stack-based buffer overflow when parsing the remote device
name from EIR data
- CVE-2026-85218: fix stack-based buffer overflows in AVRCP ListPlayerAttributes
response handling by validating the PDU length and clamping the attribute count
codec capability storage and validate cached capabilities on load
- CVE-2026-75032: fix out-of-bounds read in AVRCP GetFolderItems response parsing
by bounding media item and folder names to the received packet length
- CVE-2026-80185: fix type confusion crash in SDP XML record parsing by rejecting
nested attributes and mismatched sequence/alternate closing elements
- CVE-2026-80186: fix stack-based buffer overflow when parsing the remote device
name from EIR data
- CVE-2026-85218: fix stack-based buffer overflows in AVRCP ListPlayerAttributes
response handling by validating the PDU length and clamping the attribute count
References
- https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1792508765.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-19774 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-75032 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-80185 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-80186 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-85218 Vendor Advisory
Timeline
Published20 Oct 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1792508765 · OSV
Track software like this
Free during beta