Null Pointer Dereference in Bluetooth L2CAP - Linux Kernel

CVE-2026-31510

What is CVE-2026-31510?

A vulnerability in the Linux kernel's Bluetooth L2CAP subsystem has been identified, which allows a null pointer dereference to occur in the l2cap_sock_ready_cb function. This vulnerability could lead to a system crash, potentially jeopardizing system stability and performance. A proper check for the sk pointer was added to prevent this issue, ensuring that it is not null before use. Affected systems running specific versions of the Linux kernel may experience issues, necessitating prompt patching to maintain operational integrity.

References