CVE-2026-45835
Bluetooth: Fix Null Pointer Dereference in L2CAP Socket Connection
Publication date: 2026-05-26
Last updated on: 2026-05-26
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a null pointer dereference issue in the Linux kernel's Bluetooth L2CAP component, specifically in the function l2cap_sock_new_connection_cb().
The fix involved adding a NULL pointer guard similar to those already present in related functions l2cap_sock_resume_cb() and l2cap_sock_ready_cb().
How can this vulnerability impact me? :
A null pointer dereference vulnerability can cause the affected system to crash or become unstable when the vulnerable code is executed.
In this case, exploitation could lead to denial of service (DoS) conditions in the Linux kernel's Bluetooth stack.