CVE-2026-74304

Not scored yetLast modified Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device

hu->serdev is NULL for hci_uart attached via non-serdev paths, but qca_setup() unconditionally calls serdev_device_get_drvdata(hu->serdev) and dereferences the result, causing a NULL pointer dereference.

Fix by guarding the dereference with a NULL check, consistent with the rest of qca_setup().

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 7812a441617ad7cf3e62281d3fa518d2ba17c100, < 74f179e75ab03bdc818a5e9709d8a8440c351463; >= 22d893eec0d52fa97d25d3de248285648f26ef68, < 0704c04769ccc1a0939682db35d816dfa5fe75dc; >= 22d893eec0d52fa97d25d3de248285648f26ef68, < 3ec629fee178d429f01ae843e4ea888de93012bf
LinuxLinux7.0

References

Timeline

Published
Aug 15, 2026
Last modified
Sep 25, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-743057.8In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for prog arrays The fix in cCVE-2026-743067.8In the Linux kernel, the following vulnerability has been resolved: vfio/qat: fix f_pos race in qat_vf_resume_write() qat_vf_resume_write(CVE-2026-74307In the Linux kernel, the following vulnerability has been resolved: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT RejectCVE-2026-74308In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4_write_inline_data_end When the data=journCVE-2026-7430910.0In the Linux kernel, the following vulnerability has been resolved: vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler Look up tCVE-2026-74314.4An incorrect permission assignment for critical resource of Ivanti Secure Access Client   before 22.8R6 allows a local authenticated user toCVE-2026-743109.3In the Linux kernel, the following vulnerability has been resolved: vhost/net: complete zerocopy ubufs only once vhost-net initializes oneCVE-2026-743117.8In the Linux kernel, the following vulnerability has been resolved: virtio: rtc: tear down old virtqueues before restore virtio_device_resCVE-2026-743127.8In the Linux kernel, the following vulnerability has been resolved: vhost/vdpa: validate virtqueue index in mmap and fault paths vhost_vdpCVE-2026-743138.8In the Linux kernel, the following vulnerability has been resolved: vduse: hold vduse_lock across IDR lookup in open path vduse_dev_open()CVE-2026-743147.8In the Linux kernel, the following vulnerability has been resolved: bpf: Cancel special fields on map value recycle Map update and delete CVE-2026-743159.8In the Linux kernel, the following vulnerability has been resolved: lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file() file
CVE-2026-74304: Unscored | Vulnix