CVE-2026-80186 HIGH

CVE-2026-80186: Bluez: stack overflow in name2utf8 causes dos and potential code execution

Vendor Red Hat
Product Red Hat Enterprise Linux 10
Weakness CWE-120
Published August 25, 2026
Last update August 27, 2026
View on NVD All CVEs

CVSS base score

7.6/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

What the vulnerability does

01Description

A stack-based buffer overflow vulnerability exists in BlueZ, the Linux Bluetooth protocol stack. A remote user within Bluetooth radio range can send a specially crafted Extended Inquiry Response (EIR) packet that causes a buffer overflow when the target device performs Bluetooth discovery. This vulnerability can lead to a Denial of Service (DoS) by crashing the bluetoothd service and may allow for arbitrary code execution.

Key dates

02Disclosure timeline

August 25, 2026 CVE published
August 27, 2026 Record updated