CVE-2026-80185 Red Hat CVE debrief

Who should care

Defenders responsible for systems using BlueZ, particularly those with unprivileged local access, should assess exposure and prioritize patching to prevent potential local denial of service (DoS) attacks. This includes operators, platform administrators, vulnerability management teams, and security teams. They should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Why it matters

Defenders should prioritize verifying and patching BlueZ installations, particularly in systems where unprivileged local access is a concern, to prevent potential local denial of service (DoS) attacks.

• Local denial of service (DoS) via crafted ServiceRecord
• Potential for unprivileged local access to crash bluetoothd

Technical summary

BlueZ sdp-xml.c type confusion via RegisterProfile(ServiceRecord) can crash bluetoothd (local DoS): a crafted nested ServiceRecord can corrupt the SDP XML parser stack so scalar union data is treated as a sequence pointer, allowing a local caller to crash bluetoothd. This issue affects BlueZ installations, particularly those with unprivileged local access. Defenders should prioritize verifying and patching BlueZ to prevent potential local denial of service (DoS) attacks. The vulnerability is grounded in the CVE record and source item details.

Defensive priority

Defenders should prioritize verifying and patching BlueZ installations, particularly in systems where unprivileged local access is a concern.

Recommended defensive actions

• Verify and apply patches for BlueZ
• Restrict access to bluetoothd
• Monitor for suspicious activity
• Review compensating controls for exposed systems
• Check relevant monitoring, detection, and logs for exposed assets
• Track exceptions, retest remediated assets
• Review the supplied official advisory or CVE record

Evidence notes

The CVE record and source item provide details on the type confusion vulnerability in BlueZ sdp-xml.c, which can lead to a local denial of service (DoS). The vulnerability is caused by a crafted nested ServiceRecord that can corrupt the SDP XML parser stack. Defenders should verify and patch BlueZ installations, particularly in systems where unprivileged local access is a concern. Evidence is limited to CVE and source item details; further verification is recommended.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.