{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"fd072f833147b0bc10c43a454624cb99d02f3fc7","status":"affected","version":"8d836d71e2223b8961b21112bb4ce89ef8231682","versionType":"git"},{"lessThan":"6e8d1a2a677a81caa60cf0aabd4217bd585fbba1","status":"affected","version":"8d836d71e2223b8961b21112bb4ce89ef8231682","versionType":"git"},{"lessThan":"e1863e7480feddb90125d0dd5a1b572972d75908","status":"affected","version":"8d836d71e2223b8961b21112bb4ce89ef8231682","versionType":"git"},{"lessThan":"cf1fd517f892ded88168df878f834b625133f86d","status":"affected","version":"8d836d71e2223b8961b21112bb4ce89ef8231682","versionType":"git"},{"lessThan":"58dc5e3d8768e121907608e6e196a908512fb083","status":"affected","version":"8d836d71e2223b8961b21112bb4ce89ef8231682","versionType":"git"},{"lessThan":"32bd343803d4ba47cc516f9d5f037f01b855d767","status":"affected","version":"8d836d71e2223b8961b21112bb4ce89ef8231682","versionType":"git"},{"lessThan":"a93d66907dd4d29b65c9797a93784bf61906d6d6","status":"affected","version":"8d836d71e2223b8961b21112bb4ce89ef8231682","versionType":"git"},{"lessThan":"78a88d43dab8d23aeef934ed8ce34d40e6b3d613","status":"affected","version":"8d836d71e2223b8961b21112bb4ce89ef8231682","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"3.13"},{"lessThan":"3.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.140","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.90","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.30","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.7","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1","versionType":"original_commit_for_fix"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 TM MFP - GNU/Linux subsystem","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-45836","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()\n\nAdd the same NULL guard already present in\nl2cap_sock_resume_cb() and l2cap_sock_ready_cb().","epss":{"date":"2026-11-06","percentile":0.02294,"score":0.00126},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793979778380,"publishedAt":1779812053568,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/fd072f833147b0bc10c43a454624cb99d02f3fc7"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/6e8d1a2a677a81caa60cf0aabd4217bd585fbba1"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/e1863e7480feddb90125d0dd5a1b572972d75908"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/cf1fd517f892ded88168df878f834b625133f86d"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/58dc5e3d8768e121907608e6e196a908512fb083"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/32bd343803d4ba47cc516f9d5f037f01b855d767"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/a93d66907dd4d29b65c9797a93784bf61906d6d6"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/78a88d43dab8d23aeef934ed8ce34d40e6b3d613"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-784472.html"}],"remediation":[],"revision":"b6cbe88754ec992490a59f9efde5979d2d587d0ccfa7cc4214b4f759a7e48eab","sources":[{"modifiedAt":1793979778380,"name":"CNA: Linux","retrievedAt":1793981738016,"url":"https://www.cve.org/CVERecord?id=CVE-2026-45836"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793981759594,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-45836"}],"ssvc":{"assessedAt":1793979690416,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()","updatedAt":1793981759594}