CVE-2025-37792
Published: May 1, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Prevent potential NULL dereference The btrtl_initialize() function checks that rtl_load_file() either had an error or it loaded a zero length file. However, if it loaded a zero length file then the error code is not set correctly. It results in an error pointer vs NULL bug, followed by a NULL pointer dereference. This was detected by Smatch: drivers/bluetooth/btrtl.c:592 btrtl_initialize() warn: passing zero to 'ERR_PTR'
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 26503ad25de8c7c93a2037f919c2e49a62cf65f1 - < c3e9717276affe59fd8213706db021b493e81e34affected 26503ad25de8c7c93a2037f919c2e49a62cf65f1 - < 73dc99c0ea94abd22379b2d82cacbc73f3e18ec1affected 26503ad25de8c7c93a2037f919c2e49a62cf65f1 - < 2d7c60c2a38b4b461fa960ad0995136a6bfe0756affected 26503ad25de8c7c93a2037f919c2e49a62cf65f1 - < d8441818690d795232331bd8358545c5c95b6b72affected 26503ad25de8c7c93a2037f919c2e49a62cf65f1 - < 3db6605043b50c8bb768547b23e0222f67ceef3e+3 more versions |
Linux | Linux | affected 4.19unaffected 0 - < 4.19unaffected 5.4.293 - <= 5.4.*unaffected 5.10.237 - <= 5.10.*unaffected 5.15.181 - <= 5.15.*+5 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now