PT-2026-43302 · Linux+1 · Linux Kernel+1

Published 2026-05-26 · Updated 2026-06-04 · CVE-2026-45834

Positive Technologies (AI Summary)

CVSS v4.0

5.7

Medium

Base vector

AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified) openSUSE Tumbleweed versions prior to kernel-devel-7.0.11-1.1

Description A null pointer dereference exists in the Bluetooth L2CAP component. This occurs within the l2cap sock state change cb() function, where a missing NULL guard allows the system to attempt to access an invalid memory address.

Recommendations Update to a version of the Linux kernel where the NULL guard has been added to the l2cap sock state change cb() function. Update openSUSE Tumbleweed to kernel-devel-7.0.11-1.1.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-45834

ECHO-4A73-8DF7-E659

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

Opensuse Tumbleweed

References · 295

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45834.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2026-45834 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-45834 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://git.kernel.org/stable/c/1810e42ff6716f320c7269d5850eca48b07b7427 · Patch
• https://git.kernel.org/stable/c/a2dcf1a61d056aef15b63c6eae9441344d624389 · Patch
• https://osv.dev/vulnerability/CVE-2026-45834 · Vendor Advisory
• https://git.kernel.org/stable/c/1b1c0da227bf63479bac9982fc8d12df9aaea0fb · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-45834 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-45834 · Vendor Advisory
• https://git.kernel.org/stable/c/2ff1a41a912de8517b4482e946dd951b7d80edbf · Patch
• https://ubuntu.com/security/CVE-2026-45834 · Vendor Advisory
• https://git.kernel.org/stable/c/5105f3e6b2df619c635b5f6a49fac131a36c7952 · Patch
• https://git.kernel.org/stable/c/0c17c8832562b2aac288e89cefd0f46074f54bcb · Patch
• https://git.kernel.org/stable/c/85426e97dc72f2088ba6d27e74cd58c3fbd43e31 · Patch