A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response (EIR) packet that causes a buffer overflow when the target device performs Bluetooth discovery. This vulnerability can lead to a Denial of Service (DoS) by crashing the bluetoothd service and may allow for arbitrary code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bluez-debugsourceUpgrade bluez-cupsUpgrade bluez-debuginfoUpgrade bluez-libs-devel-debuginfoUpgrade bluez-obexd-debuginfoUpgrade bluez-libsUpgrade bluez-deprecated-debuginfoUpgrade bluez-libs-debuginfoUpgrade bluez-hid2hci-debuginfoUpgrade bluez-deprecatedUpgrade bluez-libs-develUpgrade bluez-mesh-debuginfoUpgrade bluez-cups-debuginfoUpgrade bluezUpgrade bluez-obexdUpgrade bluez-meshUpgrade bluez-hid2hci | Sep 30, 2026 | Aug 25, 2026 |
| Redhat_linux | — | No solution exists | Aug 27, 2026 | Aug 25, 2026 |
| Ubuntu | — | Upgrade bluez (Ubuntu Pro)Upgrade bluez | Oct 12, 2026 | Oct 8, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub