Null Pointer Dereference in Linux Kernel Bluetooth Component

CVE-2026-45836

What is CVE-2026-45836?

A vulnerability within the Bluetooth subsystem of the Linux kernel can lead to a null pointer dereference in specific socket callbacks. This issue occurs in the L2CAP (Logical Link Control and Adaptation Protocol) layer, potentially causing application crashes or denial of service. The vulnerability has been addressed by adding necessary null checks to prevent the dereference of a null pointer, enhancing the stability and security of Bluetooth operations within the affected Linux kernel versions.

References