CVE-2026-74304
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device hu->serdev is NULL for hci_uart attached via non-serdev paths, but qca_setup() unconditionally calls serdev_device_get_drvdata(hu->serdev) and dereferences the result, causing a NULL pointer dereference. Fix by guarding the dereference with a NULL check, consistent with the rest of qca_setup().
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linux74f179e75ab03bdc818a5e9709d8a8440c351463, 0704c04769ccc1a0939682db35d816dfa5fe75dc, 3ec629fee178d429f01ae843e4ea888de93012bf or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 7812a441617ad7cf3e62281d3fa518d2ba17c100 ≤ v < 74f179e75ab03bdc818a5e9709d8a8440c351463, 22d893eec0d52fa97d25d3de248285648f26ef68 ≤ v < 0704c04769ccc1a0939682db35d816dfa5fe75dc, 22d893eec0d52fa97d25d3de248285648f26ef68 ≤ v < 3ec629fee178d429f01ae843e4ea888de93012bf, 7.0 | 74f179e75ab03bdc818a5e9709d8a8440c351463, 0704c04769ccc1a0939682db35d816dfa5fe75dc, 3ec629fee178d429f01ae843e4ea888de93012bf |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.