PT-2026-43304 · Linux · Linux Kernel

Published 2026-05-26 · Updated 2026-06-04 · CVE-2026-45836

Positive Technologies (AI Summary)

CVSS v4.0

5.7

Medium

Base vector

AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL-pointer dereference exists in the Bluetooth L2CAP subsystem, specifically within the l2cap sock get sndtimeo cb() function. This issue can lead to kernel crashes and a denial of service. A NULL-pointer dereference occurs when a program attempts to read or write to a memory address that is NULL, which typically results in the application or system crashing.

Recommendations Disable Bluetooth if it is not in use. Blacklist the kernel modules associated with Bluetooth. Monitor for unexpected Bluetooth activity. Audit embedded and edge device configurations regularly.

Exploit

Fix

LPE

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-45836

ECHO-3A6D-E839-9D06

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 297

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45836.json · Exploit
• https://git.kernel.org/stable/c/a93d66907dd4d29b65c9797a93784bf61906d6d6 · Patch
• https://git.kernel.org/stable/c/fd072f833147b0bc10c43a454624cb99d02f3fc7 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://git.kernel.org/stable/c/78a88d43dab8d23aeef934ed8ce34d40e6b3d613 · Patch
• https://ubuntu.com/security/CVE-2026-45836 · Vendor Advisory
• https://git.kernel.org/stable/c/32bd343803d4ba47cc516f9d5f037f01b855d767 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-45836 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-45836 · Vendor Advisory
• https://git.kernel.org/stable/c/cf1fd517f892ded88168df878f834b625133f86d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-45836 · Security Note
• https://osv.dev/vulnerability/CVE-2026-45836 · Vendor Advisory
• https://git.kernel.org/stable/c/e1863e7480feddb90125d0dd5a1b572972d75908 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-45836 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-45836 · Vendor Advisory