CVE-2026-74303

Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device

hu->serdev is NULL for hci_uart attached via non-serdev paths, but qca_dmp_hdr() unconditionally dereferences hu->serdev->dev.driver->name, causing a NULL pointer dereference.

Fix by guarding the dereference with a NULL check and falling back to "hci_ldisc_qca" for the non-serdev case.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	06d3fdfcdf5cefb06f2024b9d3dad356779399cf to before 809230cc25dde1d6bb00de2a1eeb5f3199402fbeAffected 06d3fdfcdf5cefb06f2024b9d3dad356779399cf to before a209744230f9ce3d7a7e9a0839944f5cb5fa02a4Affected 06d3fdfcdf5cefb06f2024b9d3dad356779399cf to before e284bb94ad4512ec0bcd9b91bda99e67c507f7f8Affected 06d3fdfcdf5cefb06f2024b9d3dad356779399cf to before d54a5fb7d821b88c7c5569d450af59dafccaf414Affected 06d3fdfcdf5cefb06f2024b9d3dad356779399cf to before 6b8cbcf08de0db62254d1981f83db0f94681ccd9Affected
LinuxLinux	6.6Affected before 6.6Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

06d3fdfcdf5cefb06f2024b9d3dad356779399cf to before 809230cc25dde1d6bb00de2a1eeb5f3199402fbeAffected
06d3fdfcdf5cefb06f2024b9d3dad356779399cf to before a209744230f9ce3d7a7e9a0839944f5cb5fa02a4Affected
06d3fdfcdf5cefb06f2024b9d3dad356779399cf to before e284bb94ad4512ec0bcd9b91bda99e67c507f7f8Affected
06d3fdfcdf5cefb06f2024b9d3dad356779399cf to before d54a5fb7d821b88c7c5569d450af59dafccaf414Affected
06d3fdfcdf5cefb06f2024b9d3dad356779399cf to before 6b8cbcf08de0db62254d1981f83db0f94681ccd9Affected

LinuxLinux

6.6Affected
before 6.6Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.