Back to CVE records
Medium 5.5Published May 26, 2026
CVE-2026-45835Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()
Updated under an hour ago ()
Does this affect you?
It affects Linux and 2 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() Add the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_sock_ready_cb().
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 80808e431e1ef25856457de82ce141bed6a6313a builds before 140b63cb46f2855ac4ec8fba2f1e974a9c2974e8; 80808e431e1ef25856457de82ce141bed6a6313a builds before 2422eaed0925973c0f318c94eb13e76f14c7381e; 80808e431e1ef25856457de82ce141bed6a6313a builds before 684a1f9ee2325437ae18ac5371884e4c6a25ae73; from 80808e431e1ef25856457de82ce141bed6a6313a before ab77c8bc30269bee15d917059a66bea48909f5f0; from 80808e431e1ef25856457de82ce141bed6a6313a before bc3bb9f40da8e53896abc2d29c6d0c6686fe4ab9; 80808e431e1ef25856457de82ce141bed6a6313a builds before 741e6024e31587b0c021b6616a9e428a4ea0b64a; 80808e431e1ef25856457de82ce141bed6a6313a builds before 76083fb80f5a38ac13326b2d810f66bd07771eea; 80808e431e1ef25856457de82ce141bed6a6313a builds before 0a120d96166301d7a95be75b52f843837dbd1219 | CNA record |
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name) | all versions | CISA ADP |
linux linux_kernel linux:linux_kernel | from 3.1 before 5.10.258; from 5.11 before 5.15.209; from 5.16 before 6.1.175; from 6.2 before 6.6.140; from 6.7 before 6.12.88; from 6.13 before 6.18.30; from 6.19 before 7.0.7; 7.1; and 1 more ranges | NVD |
References
- https://git.kernel.org/stable/c/140b63cb46f2855ac4ec8fba2f1e974a9c2974e8patch
- https://git.kernel.org/stable/c/2422eaed0925973c0f318c94eb13e76f14c7381epatch
- https://git.kernel.org/stable/c/684a1f9ee2325437ae18ac5371884e4c6a25ae73patch
- https://git.kernel.org/stable/c/ab77c8bc30269bee15d917059a66bea48909f5f0patch
- https://git.kernel.org/stable/c/bc3bb9f40da8e53896abc2d29c6d0c6686fe4ab9patch
- https://git.kernel.org/stable/c/741e6024e31587b0c021b6616a9e428a4ea0b64apatch
- https://git.kernel.org/stable/c/76083fb80f5a38ac13326b2d810f66bd07771eeapatch
- https://git.kernel.org/stable/c/0a120d96166301d7a95be75b52f843837dbd1219patch
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.