Vulnerability in Linux Kernel Bluetooth L2CAP Handling

CVE-2026-45835

What is CVE-2026-45835?

A vulnerability in the Bluetooth Low Energy (BLE) stack within the Linux kernel can lead to a null pointer dereference during the handling of L2CAP connections. Specifically, the issue arises within the function responsible for initiating new L2CAP connections, where a missing null guard can cause the system to encounter a fatal error, potentially affecting device stability and security. This vulnerability has been addressed by incorporating similar null checks that are already present in corresponding functions, thereby enhancing the robustness of Bluetooth operations in the Linux kernel.

References