CVE-2026-23146 | Linux Kernel up to 6.18.8 Bluetooth hci_uart_set_proto null pointer dereference (Nessus ID 299221 / WID-SEC-2026-0421)

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.18.8. This impacts the function hci_uart_set_proto of the component Bluetooth. The manipulation leads to null pointer dereference. This vulnerability is referenced as CVE-2026-23146. The attack needs to be initiated within the local network. No exploit is available. It is advisable to upgrade the affected component.