CVE-2026-80185 — Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root

CVE-2026-80185

Bluez: sdp-xml: bluez 5.86: unprivileged-local and adjacent-le-peer leads to arbitrary code execution as root PUBLISHED

Description (CNA)

BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd.

Affected (CNA)

Vendor / product	Versions
Red Hat / Red Hat Enterprise Linux 10	affected
Red Hat / Red Hat Enterprise Linux 6	unaffected
Red Hat / Red Hat Enterprise Linux 7	affected
Red Hat / Red Hat Enterprise Linux 8	affected
Red Hat / Red Hat Enterprise Linux 9	affected

CWE

CWE-843

References

https://access.redhat.com/security/cve/CVE-2026-80185
https://bugzilla.redhat.com/show_bug.cgi?id=2524139

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.