CVE-2026-64405

A flaw was found in the Linux kernel's Bluetooth subsystem, specifically within the hci_conn module. This vulnerability occurs when the hci_abort_conn() function attempts to process a pending connection while a critical pointer is unexpectedly null. This can lead to a null pointer dereference, causing a general protection fault and resulting in a system crash. The primary impact is a Denial of Service (DoS), making the system unavailable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.