In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device hu->serdev is NULL for hci_uart attached via non-serdev paths, but qca_dmp_hdr() unconditionally dereferences hu->serdev->dev.driver->name, causing a NULL pointer dereference. Fix by guarding the dereference with a NULL check and falling back to "hci_ldisc_qca" for the non-serdev case.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00168.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
References
Link Providers
https://git.kernel.org/stable/c/6b8cbcf08de0db62254d1981f83db0f94681ccd9 cve-icon cve-icon
https://git.kernel.org/stable/c/809230cc25dde1d6bb00de2a1eeb5f3199402fbe cve-icon cve-icon
https://git.kernel.org/stable/c/a209744230f9ce3d7a7e9a0839944f5cb5fa02a4 cve-icon cve-icon
https://git.kernel.org/stable/c/d54a5fb7d821b88c7c5569d450af59dafccaf414 cve-icon cve-icon
https://git.kernel.org/stable/c/e284bb94ad4512ec0bcd9b91bda99e67c507f7f8 cve-icon cve-icon
History

Sat, 15 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476

Sat, 15 Aug 2026 06:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device hu->serdev is NULL for hci_uart attached via non-serdev paths, but qca_dmp_hdr() unconditionally dereferences hu->serdev->dev.driver->name, causing a NULL pointer dereference. Fix by guarding the dereference with a NULL check and falling back to "hci_ldisc_qca" for the non-serdev case.
Title Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:58:05.321Z

Reserved: 2026-08-15T05:44:03.882Z

Link: CVE-2026-74303

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:29.930

Modified: 2026-08-15T06:22:29.930

Link: CVE-2026-74303

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T17:45:03Z