CVE-2026-85218

unknown
Published 2026-10-08 · Modified —
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
—

Description

BlueZ vulnerabilities

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Debian Security Tracker · View original ↗ · DFSG

CVE-2026-85218 NameCVE-2026-85218 SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) Vulnerable and fixed packages The table below lists information on source packages. Source PackageReleaseVersionStatus bluez (PTS)bookworm5.66-1+deb12u2vulnerable bookworm…

CVE-2026-85218

NameCVE-2026-85218
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
bluez (PTS)bookworm5.66-1+deb12u2vulnerable
bookworm (security)5.66-1+deb12u1vulnerable
trixie5.82-1.1vulnerable
forky, sid5.87-2vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
bluezsource(unstable)(unfixed)

Notes

[trixie] - bluez <no-dsa> (Minor issue)
https://github.com/bluez/bluez/security/advisories/GHSA-m2vx-pw5f-rc8v

Home - Debian Security - Source (Git)

Apply commands

text fix
Notes
[trixie] - bluez <no-dsa> (Minor issue)https://github.com/bluez/bluez/security/advisories/GHSA-m2vx-pw5f-rc8v

OS impact

suse SUSE Affected 1 release
VersionStatusFixed in
— Affected —
debian Debian Mixed 4 releases
VersionStatusFixed in
trixie Affected —
sid Fixed 5.87-4
forky Fixed 5.87-4
bookworm Affected —
ubuntu Ubuntu Fixed 6 releases
VersionStatusFixed in
xenial Fixed 5.37-0ubuntu5.3+esm6
resolute Fixed 5.85-4ubuntu0.3
noble Fixed 5.72-0ubuntu5.7
jammy Fixed 5.64-0ubuntu1.5
focal Fixed 5.53-0ubuntu3.9+esm1
bionic Fixed 5.48-0ubuntu3.9+esm3

References

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.