CVE-2025-37792

Bluetooth: btrtl: Prevent potential NULL dereference

published May 1, 2025

CVSS
—
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btrtl: Prevent potential NULL dereference

The btrtl_initialize() function checks that rtl_load_file() either

had an error or it loaded a zero length file. However, if it loaded

a zero length file then the error code is not set correctly. It

results in an error pointer vs NULL bug, followed by a NULL pointer

dereference. This was detected by Smatch:

drivers/bluetooth/btrtl.c:592 btrtl_initialize() warn: passing zero to 'ERR_PTR'

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Published
2025-05-01T13:07Z
EPSS history
Timeline
  • 01 MAY 13:07Z
    Bluetooth: btrtl: Prevent potential NULL dereference
    cvelistv5