#1144967 bluez: known discovery filter bug causes sigsegv/crash

Package:
bluez
Source:
bluez
Description:
Bluetooth tools and daemons
Submitter:
Nathan Schulte
Date:
2026-08-20 22:59:02 UTC
Severity:
normal
Tags:
#1144967#5
Date:
2026-08-20 22:57:23 UTC
From:
To:
5.87 introduced a regression about discovery with a UUID [service]
filter -- the upstream source passes the UUID string as the filter
function parameter, which causes SIGSEGV/crash when the string (on the
heap) is attempted to be executed; this is due to the function type
being 'void *', which thereby allows this situation to satisfy compile
time type enforcement.

A fix has been applied to upstream development, but it's not clear when
5.88 will be released, so requesting this be patched in Debian.

The patch is available here:
https://git.kernel.org/pub/scm/bluetooth/bluez.git/patch/?id=82af2beafc39510e2c4a439bf44faea711d6503f

The upstream commit forming the patch is here:
https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=82af2beafc39510e2c4a439bf44faea711d6503f

The bug report about the issue is here:
https://github.com/bluez/bluez/issues/2282

Thank you for your attention to this matter.