CVE-2025-38304

Bluetooth: Fix NULL pointer deference on eir_get_service_data

published July 10, 2025

CVSS
—
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix NULL pointer deference on eir_get_service_data

The len parameter is considered optional so it can be NULL so it cannot

be used for skipping to next entry of EIR_SERVICE_DATA.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.8th percentile
Published
2025-07-10T07:42Z
EPSS history
Timeline
  • 10 JUL 07:42Z
    Bluetooth: Fix NULL pointer deference on eir_get_service_data
    cvelistv5