CVE-2026-45836

Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()

MEDIUM

5.5

CVSS Score

Published: May 26, 2026 at 04:14 PM UTC

Updated: October 15, 2026 at 02:19 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() Add the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_sock_ready_cb().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

3.13 ≤ v < 5.10.2585.11 ≤ v < 5.15.2095.16 ≤ v < 6.1.1756.13 ≤ v < 6.18.306.19 ≤ v < 7.0.76.2 ≤ v < 6.6.1406.7 ≤ v < 6.12.907.1 7.1 rc1 7.1 rc28d836d71e2223b8961b21112bb4ce89ef8231682

Vendor states this is fixed in 32bd343803d4ba47cc516f9d5f037f01b855d767 (fixed)

Vendor states this is fixed in 58dc5e3d8768e121907608e6e196a908512fb083 (fixed)

Vendor states this is fixed in 6e8d1a2a677a81caa60cf0aabd4217bd585fbba1 (fixed)

Vendor states this is fixed in 78a88d43dab8d23aeef934ed8ce34d40e6b3d613 (fixed)

Vendor states this is fixed in a93d66907dd4d29b65c9797a93784bf61906d6d6 (fixed)

Vendor states this is fixed in cf1fd517f892ded88168df878f834b625133f86d (fixed)

Vendor states this is fixed in e1863e7480feddb90125d0dd5a1b572972d75908 (fixed)

Vendor states this is fixed in fd072f833147b0bc10c43a454624cb99d02f3fc7 (fixed)

Vendor states this is fixed in 3.13 (unaffected)

Vendor states this is fixed in 5.10.258 (unaffected)

Vendor states this is fixed in 5.15.209 (unaffected)

Vendor states this is fixed in 6.1.175 (unaffected)