CVE-2026-101887

The BlueALSA daemon (bluez-alsa/bluealsad ) contains a division-by-zero vulnerability within the LC3plus sink decoder (specifically in a2dp-lc3plus.c and a2dp_lc3plus_dec_thread). A Bluetooth-adjacent attacker can trigger a SIGFPE by establishing an A2DP source connection and transmitting a non-f...