In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device

hu->serdev is NULL for hci_uart attached via non-serdev paths, but
qca_dmp_hdr() unconditionally dereferences hu->serdev->dev.driver->name,
causing a NULL pointer dereference.

Fix by guarding the dereference with a NULL check and falling back to
"hci_ldisc_qca" for the non-serdev case.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00168.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
06d3fdfcdf5cefb06f2024b9d3dad356779399cf affected < 809230cc25dde1d6bb00de2a1eeb5f3199402fbe
06d3fdfcdf5cefb06f2024b9d3dad356779399cf affected < a209744230f9ce3d7a7e9a0839944f5cb5fa02a4
06d3fdfcdf5cefb06f2024b9d3dad356779399cf affected < e284bb94ad4512ec0bcd9b91bda99e67c507f7f8
06d3fdfcdf5cefb06f2024b9d3dad356779399cf affected < d54a5fb7d821b88c7c5569d450af59dafccaf414
06d3fdfcdf5cefb06f2024b9d3dad356779399cf affected < 6b8cbcf08de0db62254d1981f83db0f94681ccd9
Linux Linux affected
Version Status Constraints
6.6 affected —
0 unaffected < 6.6
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/6b8cbcf08de0db62254d1981f83db0f94681ccd9 cve-icon cve-icon
https://git.kernel.org/stable/c/809230cc25dde1d6bb00de2a1eeb5f3199402fbe cve-icon cve-icon
https://git.kernel.org/stable/c/a209744230f9ce3d7a7e9a0839944f5cb5fa02a4 cve-icon cve-icon
https://git.kernel.org/stable/c/d54a5fb7d821b88c7c5569d450af59dafccaf414 cve-icon cve-icon
https://git.kernel.org/stable/c/e284bb94ad4512ec0bcd9b91bda99e67c507f7f8 cve-icon cve-icon
History

Sat, 15 Aug 2026 06:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device hu->serdev is NULL for hci_uart attached via non-serdev paths, but qca_dmp_hdr() unconditionally dereferences hu->serdev->dev.driver->name, causing a NULL pointer dereference. Fix by guarding the dereference with a NULL check and falling back to "hci_ldisc_qca" for the non-serdev case.
Title Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:58:05.321Z

Reserved: 2026-08-15T05:44:03.882Z

Link: CVE-2026-74303

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:29.930

Modified: 2026-08-15T06:22:29.930

Link: CVE-2026-74303

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.