CVE-2026-45834

MediumCVSS 5.5/10Last modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()

Add the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_sock_ready_cb().

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 89bc500e41fc5b48e0573e6b0d927fc97b8951dc, < 1b1c0da227bf63479bac9982fc8d12df9aaea0fb; >= 89bc500e41fc5b48e0573e6b0d927fc97b8951dc, < 85426e97dc72f2088ba6d27e74cd58c3fbd43e31; >= 89bc500e41fc5b48e0573e6b0d927fc97b8951dc, < 0c17c8832562b2aac288e89cefd0f46074f54bcb; >= 89bc500e41fc5b48e0573e6b0d927fc97b8951dc, < 5105f3e6b2df619c635b5f6a49fac131a36c7952; >= 89bc500e41fc5b48e0573e6b0d927fc97b8951dc, < c88c185ae0a1067823661b220aeea613df2c127b; >= 89bc500e41fc5b48e0573e6b0d927fc97b8951dc, < 1810e42ff6716f320c7269d5850eca48b07b7427; >= 89bc500e41fc5b48e0573e6b0d927fc97b8951dc, < a2dcf1a61d056aef15b63c6eae9441344d624389; >= 89bc500e41fc5b48e0573e6b0d927fc97b8951dc, < 2ff1a41a912de8517b4482e946dd951b7d80edbf
LinuxLinux3.1
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< *

References

Timeline

Published
May 26, 2026
Last modified
Nov 6, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-458355.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() CVE-2026-458365.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() ACVE-2026-458377.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in arena_vm_close on fork arena_vm_open() onlyCVE-2026-458385.5In the Linux kernel, the following vulnerability has been resolved: bpf: fix end-of-list detection in cgroup_storage_get_next_key() list_nCVE-2026-458397.8In the Linux kernel, the following vulnerability has been resolved: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() CCVE-2026-45843.1A flaw has been found in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N. This affects an unknown part of the component Cardholder Data HandlerCVE-2026-458405.5In the Linux kernel, the following vulnerability has been resolved: openvswitch: cap upcall PID array size and pre-size vport replies The CVE-2026-458415.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO nf_osf_CVE-2026-458425.5In the Linux kernel, the following vulnerability has been resolved: slip: reject VJ receive packets on instances with no rstate array slhcCVE-2026-458438.2In the Linux kernel, the following vulnerability has been resolved: slip: bound decode() reads against the compressed packet length slhc_uCVE-2026-458445.5In the Linux kernel, the following vulnerability has been resolved: netfilter: arp_tables: fix IEEE1394 ARP payload parsing Weiming Shi saCVE-2026-458455.5In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: fix NULL pointer dereference in class dump When a T
CVE-2026-45834: Medium severity, CVSS 5.5 | Vulnix