CVE-2026-74304

Received Received - Intake

Bluetooth NULL Pointer Dereference in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device hu->serdev is NULL for hci_uart attached via non-serdev paths, but qca_setup() unconditionally calls serdev_device_get_drvdata(hu->serdev) and dereferences the result, causing a NULL pointer dereference. Fix by guarding the dereference with a NULL check, consistent with the rest of qca_setup().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74304

EUVD

EUVD-2026-59451

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a NULL pointer dereference vulnerability in the Linux kernel's Bluetooth subsystem. It occurs in the qca_setup() function when handling hci_uart devices not attached via serdev paths. The function tries to access hu->serdev without checking if it is NULL first, leading to a crash when dereferencing a NULL pointer.

Detection Guidance

This vulnerability is specific to the Linux kernel's Bluetooth subsystem and may not have direct network detection methods. Check kernel logs for NULL pointer dereference errors related to hci_qca or Bluetooth drivers using commands like 'dmesg | grep -i hci_qca' or 'journalctl -k | grep -i null pointer'.

Impact Analysis

If exploited, this vulnerability could cause a system crash or kernel panic when Bluetooth functionality is used on affected systems. This may lead to denial of service, requiring a reboot to restore normal operation. Non-privileged users with access to Bluetooth devices might trigger this issue.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a local denial-of-service issue in the Linux kernel's Bluetooth subsystem. It may indirectly impact compliance if the affected system is part of a critical infrastructure or data processing environment.

Mitigation Strategies

Update the Linux kernel to the latest patched version where this issue is resolved. If immediate patching is not possible, disable the affected Bluetooth functionality or restrict Bluetooth device usage until the update is applied.

Hi! I’m here to help you understand CVE-2026-74304. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70