Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-45834

Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.258, 5.15.209, 6.1.175, 6.6.140, 6.12.88, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() Add the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_sock_ready_cb().

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 89bc500e41fc5b48e0573e6b0d927fc97b8951dc · fixed in 1b1c0da227bf63479bac9982fc8d12df9aaea0fb; From 89bc500e41fc5b48e0573e6b0d927fc97b8951dc · fixed in 85426e97dc72f2088ba6d27e74cd58c3fbd43e31; From 89bc500e41fc5b48e0573e6b0d927fc97b8951dc · fixed in 0c17c8832562b2aac288e89cefd0f46074f54bcb; From 89bc500e41fc5b48e0573e6b0d927fc97b8951dc · fixed in 5105f3e6b2df619c635b5f6a49fac131a36c7952; From 89bc500e41fc5b48e0573e6b0d927fc97b8951dc · fixed in c88c185ae0a1067823661b220aeea613df2c127b; From 89bc500e41fc5b48e0573e6b0d927fc97b8951dc · fixed in 1810e42ff6716f320c7269d5850eca48b07b7427; From 89bc500e41fc5b48e0573e6b0d927fc97b8951dc · fixed in a2dcf1a61d056aef15b63c6eae9441344d624389; From 89bc500e41fc5b48e0573e6b0d927fc97b8951dc · fixed in 2ff1a41a912de8517b4482e946dd951b7d80edbf

  • Linux Linux

    3.1

  • KernelLinux

    From 3.1.0 · fixed in 5.10.258; From 5.11.0 · fixed in 5.15.209; From 5.16.0 · fixed in 6.1.175; From 6.2.0 · fixed in 6.6.140; From 6.7.0 · fixed in 6.12.88; From 6.13.0 · fixed in 6.18.30; From 6.19.0 · fixed in 7.0.7

References 8

git.kernel.org