Linux Kernel Bluetooth L2CAP NULL Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's Bluetooth L2CAP implementation allows for a NULL pointer dereference. This issue arises in the 'l2cap_sock_alloc' function, which is called from 'l2cap_sock_new_connection_cb'. The error handling paths do not properly account for the possibility of a NULL socket pointer, leading to potential instability. The vulnerability was identified by the Linux Verification Center using the SVACE static analysis tool.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a denial-of-service condition by crashing the Bluetooth subsystem.