CVE-2026-99008

The Linux kernel contains a NULL pointer dereference vulnerability in the Bluetooth RFCOMM component. The issue occurs in rfcomm_dev_shutdown() when an RFCOMM tty is closed. Specifically, rfcomm_dev_add() adds a device to the list before registering the tty device; if registration fails, dev->...

EUVD-2026-108802

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix NULL ttydev dereference in rfcommdevshutdown syzbot hit a NULL pointer dereference in rfcommdevshutdown when an RFCOMM tty is closed. rfcommdevadd puts the new device on rfcommdevlist first and only then...