CVE-2026-74304
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device
hu->serdev is NULL for hci_uart attached via non-serdev paths, but qca_setup() unconditionally calls serdev_device_get_drvdata(hu->serdev) and dereferences the result, causing a NULL pointer dereference.
Fix by guarding the dereference with a NULL check, consistent with the rest of qca_setup().
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 22d893eec0d52fa97d25d3de248285648f26ef68 < 0704c04769ccc1a0939682db35d816dfa5fe75dc | affected |
| Linux | Linux | 22d893eec0d52fa97d25d3de248285648f26ef68 < 3ec629fee178d429f01ae843e4ea888de93012bf | affected |
| Linux | Linux | 7.0 | affected |
| Linux | Linux | 0 < 7.0 | unaffected |
| Linux | Linux | 7.1.5 <= 7.1.* | unaffected |
| Linux | Linux | 7.2 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/0704c04769ccc1a0939682db35d816dfa5fe75dc
- https://git.kernel.org/stable/c/3ec629fee178d429f01ae843e4ea888de93012bf
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.