SB2025071120 - NULL pointer dereference in Linux kernel bluetooth
Published: July 11, 2025
Security Bulletin ID
SB2025071120
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2025-38304)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the eir_create_scan_rsp() function in net/bluetooth/eir.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/20a2aa01f5aeb6daad9aeaa7c33dd512c58d81eb
- https://git.kernel.org/stable/c/497c9d2d7d3983826bb02c10fb4a5818be6550fb
- https://git.kernel.org/stable/c/4bf29910570666e668a60d953f8da78e95bb7fa2
- https://git.kernel.org/stable/c/7d99cc0f8e6fa0f35570887899f178122a61d44e
- https://git.kernel.org/stable/c/842f7c3154d5b25ca11753c02ee8cf6ee64c0142