CLSA-2026-1791831421

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791831421.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791831421
Upstream
CVE (2)
  • CVE-2026-80186
  • CVE-2026-85218
Published
2026-10-12T18:57:13Z
Modified
2026-10-26T09:32:04Z
Summary
Fix CVE(s): CVE-2026-80186, CVE-2026-85218
Details
  • SECURITY UPDATE: stack buffer overflow parsing a remote EIR name
    • debian/patches/CVE-2026-80186.patch: clamp the name length to HCI_MAX_NAME_LENGTH in name2utf8() in src/eir.c before copying it into the fixed-size stack buffer.
    • CVE-2026-80186
  • SECURITY UPDATE: stack buffer overflow in AVRCP ListPlayerAttributes response handling
    • debian/patches/CVE-2026-85218.patch: validate the AVRCP header and params_len against the received bytes and clamp the attribute count to AVRCP_ATTRIBUTE_LAST in avrcp_list_player_attributes_rsp() in profiles/audio/avrcp.c.
    • CVE-2026-85218
References

Affected packages

TuxCare:Ubuntu:18.04
bluetooth

Package

Name
bluetooth
Purl
pkg:deb/tuxcare/bluetooth?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.48-0ubuntu3.9+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791831421.json"
bluez

Package

Name
bluez
Purl
pkg:deb/tuxcare/bluez?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.48-0ubuntu3.9+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791831421.json"
bluez-cups

Package

Name
bluez-cups
Purl
pkg:deb/tuxcare/bluez-cups?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.48-0ubuntu3.9+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791831421.json"
bluez-hcidump

Package

Name
bluez-hcidump
Purl
pkg:deb/tuxcare/bluez-hcidump?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.48-0ubuntu3.9+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791831421.json"
bluez-obexd

Package

Name
bluez-obexd
Purl
pkg:deb/tuxcare/bluez-obexd?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.48-0ubuntu3.9+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791831421.json"
bluez-tests

Package

Name
bluez-tests
Purl
pkg:deb/tuxcare/bluez-tests?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.48-0ubuntu3.9+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791831421.json"
libbluetooth-dev

Package

Name
libbluetooth-dev
Purl
pkg:deb/tuxcare/libbluetooth-dev?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.48-0ubuntu3.9+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791831421.json"
libbluetooth3

Package

Name
libbluetooth3
Purl
pkg:deb/tuxcare/libbluetooth3?distro=ubuntu-18.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.48-0ubuntu3.9+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1791831421.json"