PT-2026-72740

CVE-2026-74304

·

Published

2026-08-15

·

Updated

2026-11-11

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A NULL pointer dereference occurs in the Bluetooth component when handling non-serdev devices. The qca setup() function unconditionally calls serdev device get drvdata() using the hu->serdev variable. When hci uart is attached via non-serdev paths, hu->serdev is NULL, leading to a system crash upon dereferencing the result.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
CVE-2026-74304
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
USN-9003-1
USN-9021-1
USN-9043-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com