CVE-2026-45834

A flaw was found in the Linux kernel's Bluetooth L2CAP (Logical Link Control and Adaptation Protocol) implementation. A missing null pointer guard in the l2cap_sock_state_change_cb() function can lead to a null pointer dereference. This vulnerability could allow an attacker to cause a system crash, resulting in a Denial of Service (DoS).

This Moderate impact flaw in the Linux kernel's Bluetooth L2CAP implementation can lead to a system crash due to a null pointer dereference. Exploitation requires local access or close proximity to a system with an active Bluetooth adapter, limiting the attack surface. Red Hat Enterprise Linux systems with Bluetooth enabled are affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, disable the Bluetooth functionality if it is not required. This can be achieved by blacklisting the bluetooth kernel module.

1. Create a new file /etc/modprobe.d/disable-bluetooth.conf with the following content: blacklist bluetooth
2. Regenerate the initramfs: sudo dracut -f -v
3. Reboot the system for the changes to take effect: sudo reboot

Warning: Disabling the Bluetooth module will prevent all Bluetooth-related functionality on the system and requires a system reboot to take full effect.