AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-74304

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's Bluetooth subsystem, specifically within the qca_setup() function, where a NULL pointer dereference occurs when handling hci_uart devices attached via non-serdev paths. This flaw can lead to system crashes or instability when the function is invoked, potentially impacting the reliability of Bluetooth functionalities. Organizations utilizing Linux systems with Bluetooth capabilities should prioritize addressing this issue to maintain system integrity and prevent service disruptions.

CVE
CVE-2026-74304
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device hu->serdev is NULL for hci_uart attached via non-serdev paths, but qca_setup() unconditionally calls serdev_device_get_drvdata(hu->serdev) and dereferences the result, causing a NULL pointer dereference. Fix by guarding the dereference with a NULL check, consistent with the rest of qca_setup().