CVE-2026-74303

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device hu->serdev is NULL for hci_uart attached via non-serdev paths, but qca_dmp_hdr() unconditionally dereferences hu->serdev->dev.driver->name, causing a NULL pointer dereference. Fix by guarding the dereference with a NULL check and falling back to "hci_ldisc_qca" for the non-serdev case.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linux809230cc25dde1d6bb00de2a1eeb5f3199402fbe, a209744230f9ce3d7a7e9a0839944f5cb5fa02a4, e284bb94ad4512ec0bcd9b91bda99e67c507f7f8, d54a5fb7d821b88c7c5569d450af59dafccaf414, 6b8cbcf08de0db62254d1981f83db0f94681ccd9 or later

Affected products

ProductAffected versionsFixed in
Linux Linux06d3fdfcdf5cefb06f2024b9d3dad356779399cf ≤ v < 809230cc25dde1d6bb00de2a1eeb5f3199402fbe, 06d3fdfcdf5cefb06f2024b9d3dad356779399cf ≤ v < a209744230f9ce3d7a7e9a0839944f5cb5fa02a4, 06d3fdfcdf5cefb06f2024b9d3dad356779399cf ≤ v < e284bb94ad4512ec0bcd9b91bda99e67c507f7f8, 06d3fdfcdf5cefb06f2024b9d3dad356779399cf ≤ v < d54a5fb7d821b88c7c5569d450af59dafccaf414, 06d3fdfcdf5cefb06f2024b9d3dad356779399cf ≤ v < 6b8cbcf08de0db62254d1981f83db0f94681ccd9, 6.6809230cc25dde1d6bb00de2a1eeb5f3199402fbe, a209744230f9ce3d7a7e9a0839944f5cb5fa02a4, e284bb94ad4512ec0bcd9b91bda99e67c507f7f8, d54a5fb7d821b88c7c5569d450af59dafccaf414, 6b8cbcf08de0db62254d1981f83db0f94681ccd9

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.