CVE-2025-21937

Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()

State: Published
Severity: 5.5 Medium
Published: Apr 1, 2025
Updated: May 23, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()

Add check for the return value of mgmt_alloc_skb() in mgmt_remote_name() to prevent null pointer dereference.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-476 NULL Pointer Dereference

Affected Products

Product	Versions
LinuxLinux	ba17bb62ce415950753c19d16bb43b2bd3701158 to before 37785a01040cb5d11ed0ddbcbf78491fcd073161Affected ba17bb62ce415950753c19d16bb43b2bd3701158 to before c5845c73cbacf5704169283ef29ca02031a36564Affected ba17bb62ce415950753c19d16bb43b2bd3701158 to before 88310caff68ae69d0574859f7926a59c1da2d60bAffected ba17bb62ce415950753c19d16bb43b2bd3701158 to before 69fb168b88e4d62cb31cdd725b67ccc5216cfcafAffected ba17bb62ce415950753c19d16bb43b2bd3701158 to before f2176a07e7b19f73e05c805cf3d130a2999154cbAffected 0f526a6d3e9347d94c2c0b5292a3cb3b25115019Affected 5.17.2 to before 5.18Affected
LinuxLinux	5.18Affected before 5.18Not affected 6.1.131 through 6.1.Not affected 6.6.83 through 6.6.Not affected 6.12.19 through 6.12.Not affected 6.13.7 through 6.13.Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

ba17bb62ce415950753c19d16bb43b2bd3701158 to before 37785a01040cb5d11ed0ddbcbf78491fcd073161Affected
ba17bb62ce415950753c19d16bb43b2bd3701158 to before c5845c73cbacf5704169283ef29ca02031a36564Affected
ba17bb62ce415950753c19d16bb43b2bd3701158 to before 88310caff68ae69d0574859f7926a59c1da2d60bAffected
ba17bb62ce415950753c19d16bb43b2bd3701158 to before 69fb168b88e4d62cb31cdd725b67ccc5216cfcafAffected
ba17bb62ce415950753c19d16bb43b2bd3701158 to before f2176a07e7b19f73e05c805cf3d130a2999154cbAffected
0f526a6d3e9347d94c2c0b5292a3cb3b25115019Affected
5.17.2 to before 5.18Affected

LinuxLinux

5.18Affected
before 5.18Not affected
6.1.131 through 6.1.*Not affected
6.6.83 through 6.6.*Not affected
6.12.19 through 6.12.*Not affected
6.13.7 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.