CLSA-2026-1792508765

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792508765.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1792508765
Upstream
CVE (5)
  • CVE-2026-19774
  • CVE-2026-75032
  • CVE-2026-80185
  • CVE-2026-80186
  • CVE-2026-85218
Published
2026-10-20T15:06:18Z
Modified
2026-10-26T09:31:01Z
Summary
bluez: Fix of 5 CVEs
Details
  • CVE-2026-19774: fix stack-based buffer overflow in A2DP remote stream endpoint codec capability storage and validate cached capabilities on load
  • CVE-2026-75032: fix out-of-bounds read in AVRCP GetFolderItems response parsing by bounding media item and folder names to the received packet length
  • CVE-2026-80185: fix type confusion crash in SDP XML record parsing by rejecting nested attributes and mismatched sequence/alternate closing elements
  • CVE-2026-80186: fix stack-based buffer overflow when parsing the remote device name from EIR data
  • CVE-2026-85218: fix stack-based buffer overflows in AVRCP ListPlayerAttributes response handling by validating the PDU length and clamping the attribute count
References

Affected packages

TuxCare:AlmaLinux:9.2
bluez

Package

Name
bluez
Purl
pkg:rpm/tuxcare/bluez?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.72-4.el9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792508765.json"
bluez-cups

Package

Name
bluez-cups
Purl
pkg:rpm/tuxcare/bluez-cups?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.72-4.el9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792508765.json"
bluez-hid2hci

Package

Name
bluez-hid2hci
Purl
pkg:rpm/tuxcare/bluez-hid2hci?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.72-4.el9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792508765.json"
bluez-libs

Package

Name
bluez-libs
Purl
pkg:rpm/tuxcare/bluez-libs?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.72-4.el9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792508765.json"
bluez-libs-devel

Package

Name
bluez-libs-devel
Purl
pkg:rpm/tuxcare/bluez-libs-devel?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.72-4.el9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792508765.json"
bluez-mesh

Package

Name
bluez-mesh
Purl
pkg:rpm/tuxcare/bluez-mesh?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.72-4.el9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792508765.json"
bluez-obexd

Package

Name
bluez-obexd
Purl
pkg:rpm/tuxcare/bluez-obexd?distro=almalinux-9.2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.72-4.el9.tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1792508765.json"