Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-45836

Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.258, 5.15.209, 6.1.175, 6.6.140, 6.12.90, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() Add the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_sock_ready_cb().

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 8d836d71e2223b8961b21112bb4ce89ef8231682 · fixed in fd072f833147b0bc10c43a454624cb99d02f3fc7; From 8d836d71e2223b8961b21112bb4ce89ef8231682 · fixed in 6e8d1a2a677a81caa60cf0aabd4217bd585fbba1; From 8d836d71e2223b8961b21112bb4ce89ef8231682 · fixed in e1863e7480feddb90125d0dd5a1b572972d75908; From 8d836d71e2223b8961b21112bb4ce89ef8231682 · fixed in cf1fd517f892ded88168df878f834b625133f86d; From 8d836d71e2223b8961b21112bb4ce89ef8231682 · fixed in 58dc5e3d8768e121907608e6e196a908512fb083; From 8d836d71e2223b8961b21112bb4ce89ef8231682 · fixed in 32bd343803d4ba47cc516f9d5f037f01b855d767; From 8d836d71e2223b8961b21112bb4ce89ef8231682 · fixed in a93d66907dd4d29b65c9797a93784bf61906d6d6; From 8d836d71e2223b8961b21112bb4ce89ef8231682 · fixed in 78a88d43dab8d23aeef934ed8ce34d40e6b3d613

  • Linux Linux

    3.13

  • KernelLinux

    From 3.13.0 · fixed in 5.10.258; From 5.11.0 · fixed in 5.15.209; From 5.16.0 · fixed in 6.1.175; From 6.2.0 · fixed in 6.6.140; From 6.7.0 · fixed in 6.12.90; From 6.13.0 · fixed in 6.18.30; From 6.19.0 · fixed in 7.0.7

References 8

git.kernel.org