CVE-2026-85218 is listed by USN-8908-2: BlueZ regression.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 13, 2026 · Ubuntu Security Notices

   Detected

   USN-8908-1 fixed vulnerabilities in BlueZ. Unfortunately, that update introduced a regression in the A2DP profile: cached remote stream endpoints were no longer loaded at startup, which could cause Bluetooth audio devices to fail to reconnect automatically or to fall back to low-quality audio profiles. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Mi

Sources

• CVE.orgVulnerability recordCVE-2026-85218

  Official CVE identifier

  cve.org
• Ubuntu Security NoticesVendor advisoryCVE-2026-85218

  USN-8908-1 fixed vulnerabilities in BlueZ. Unfortunately, that update introduced a regression in the A2DP profile: cached remote stream endpoints were no longer loaded at startup, which could cause Bluetooth audio devices to fail to reconnect automatically or to fall back to low-

  ubuntu.com