What’s Vulnerable › Vulnerabilities

CVE-2026-45834: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-26 · updated 2026-10-15
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() Add the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_sock_ready_cb().

Affected products

• Linux kernel: from 3.1 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.88; from 6.13 before 6.18.30 — fixed in 5.10.258, 5.15.209, 6.1.175, 6.12.88, 6.18.30, 6.6.140

How to fix

Upgrade to a fixed version: Linux kernel 5.10.258, 5.15.209, 6.1.175, 6.12.88. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0c17c8832562b2aac288e89cefd0f46074f54bcb
• https://git.kernel.org/stable/c/1810e42ff6716f320c7269d5850eca48b07b7427
• https://git.kernel.org/stable/c/1b1c0da227bf63479bac9982fc8d12df9aaea0fb
• https://git.kernel.org/stable/c/2ff1a41a912de8517b4482e946dd951b7d80edbf
• https://git.kernel.org/stable/c/5105f3e6b2df619c635b5f6a49fac131a36c7952
• https://git.kernel.org/stable/c/85426e97dc72f2088ba6d27e74cd58c3fbd43e31
• https://git.kernel.org/stable/c/a2dcf1a61d056aef15b63c6eae9441344d624389
• https://git.kernel.org/stable/c/c88c185ae0a1067823661b220aeea613df2c127b
• https://cert-portal.siemens.com/productcert/html/ssa-784472.html

Get alerted when CVE-2026-45834 or the next vulnerability affects your stack