Skip to main content
← All vulnerabilities
CVE-2026-45835

Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.258, 5.15.209, 6.1.175, 6.6.140, 6.12.88, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() Add the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_sock_ready_cb().

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 80808e431e1ef25856457de82ce141bed6a6313a · fixed in 140b63cb46f2855ac4ec8fba2f1e974a9c2974e8; From 80808e431e1ef25856457de82ce141bed6a6313a · fixed in 2422eaed0925973c0f318c94eb13e76f14c7381e; From 80808e431e1ef25856457de82ce141bed6a6313a · fixed in 684a1f9ee2325437ae18ac5371884e4c6a25ae73; From 80808e431e1ef25856457de82ce141bed6a6313a · fixed in ab77c8bc30269bee15d917059a66bea48909f5f0; From 80808e431e1ef25856457de82ce141bed6a6313a · fixed in bc3bb9f40da8e53896abc2d29c6d0c6686fe4ab9; From 80808e431e1ef25856457de82ce141bed6a6313a · fixed in 741e6024e31587b0c021b6616a9e428a4ea0b64a; From 80808e431e1ef25856457de82ce141bed6a6313a · fixed in 76083fb80f5a38ac13326b2d810f66bd07771eea; From 80808e431e1ef25856457de82ce141bed6a6313a · fixed in 0a120d96166301d7a95be75b52f843837dbd1219

  • Linux Linux

    3.1

  • KernelLinux

    From 3.1.0 · fixed in 5.10.258; From 5.11.0 · fixed in 5.15.209; From 5.16.0 · fixed in 6.1.175; From 6.2.0 · fixed in 6.6.140; From 6.7.0 · fixed in 6.12.88; From 6.13.0 · fixed in 6.18.30; From 6.19.0 · fixed in 7.0.7

References 8

git.kernel.org