BlueZ vulnerabilities affect multiple Ubuntu LTS releases
Key Takeaway
Multiple vulnerabilities in the BlueZ Bluetooth stack could lead to denial of service or arbitrary code execution on Ubuntu systems.
Summary
Ubuntu has released security updates to address several vulnerabilities in the BlueZ Bluetooth stack. These flaws, affecting Ubuntu 20.04, 22.04, 24.04, and 26.04 LTS, include issues with A2DP codec storage, packet length validation, XML parsing, and AVRCP profile responses. Exploitation could result in memory corruption, crashes, or sensitive information exposure.
Technical breakdown of BlueZ vulnerabilities
- CVE-2026-19774: Incorrect codec capability storage in the A2DP profile can cause a stack buffer overflow.
- CVE-2026-75032: Improper packet length validation allows out-of-bounds memory reads.
- CVE-2026-80185: Malformed XML input can trigger a BlueZ crash.
- CVE-2026-80186: Incorrect parsing of remote names from Extended Inquiry Response data can lead to stack buffer overflows.
- CVE-2026-85218: Improper response parsing in the AVRCP profile allows out-of-bounds memory access.
Why it matters
Since BlueZ is the standard Linux Bluetooth stack, these vulnerabilities impact a wide range of desktop and embedded Ubuntu installations.
Original reference: ubuntu.com →