CVE-2026-64405 Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix null ptr deref in hciabortconn hciabortconn read hciskbeventhdev-sentcmd when a connection was pending, but hdev-sentcmd can be NULL while reqstatus is still HCIREQPEND, leading to a NULL pointer dereferen...

CVE-2026-64405

CVE-2026-64405 is a null pointer dereference in the Linux kernel's Bluetooth subsystem, specifically in hci_abort_conn() within the hci_conn module. When a connection is pending, the function reads hci_skb_event(hdev->sent_cmd), but hdev->sent_cmd can be NULL while req_status remains HCI_RE...

PT-2026-64626

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference exists in the Bluetooth component. The hci abort conn function reads hci skb eventhdev-sent cmd during a pending connection; however, hdev-sent cmd can be NULL...

DEBIAN-CVE-2021-45480

An issue was discovered in the Linux kernel before 5.15.11. There is a memory leak in the rdsconncreate function in net/rds/connection.c in a certain combination of circumstances...