CVE-2026-74304: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device hu->serdev is NULL for hci_uart attached via non-serdev paths, but qca_setup() unconditionally calls serdev_device_get_drvdata(hu->serdev) and dereferences the result, causing a NULL pointer dereference. Fix by guarding the dereference with a NULL check, consistent with the rest of qca_setup().

Засегнати продукти

• Linux Linux: 7812a441617ad7cf3e62281d3fa518d2ba17c100 преди 74f179e75ab03bdc818a5e9709d8a8440c351463; 22d893eec0d52fa97d25d3de248285648f26ef68 преди 0704c04769ccc1a0939682db35d816dfa5fe75dc; 22d893eec0d52fa97d25d3de248285648f26ef68 преди 3ec629fee178d429f01ae843e4ea888de93012bf
• Linux Linux: 7.0; преди 7.0; 7.1.5 до 7.1.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-74304
• https://nvd.nist.gov/vuln/detail/CVE-2026-74304
• https://git.kernel.org/stable/c/74f179e75ab03bdc818a5e9709d8a8440c351463
• https://git.kernel.org/stable/c/0704c04769ccc1a0939682db35d816dfa5fe75dc
• https://git.kernel.org/stable/c/3ec629fee178d429f01ae843e4ea888de93012bf