Riskcovery

CVE-2025-22007

Bluetooth: Fix error code in chan_alloc_skb_cb()

State
Published
Severity
5.5 Medium
Published
Apr 3, 2025
Updated
May 11, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix error code in chan_alloc_skb_cb()

The chan_alloc_skb_cb() function is supposed to return error pointers on error. Returning NULL will lead to a NULL dereference.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 6b8d4a6a03144c5996f98db7f8256267b0d72a3a to before b3d607e36fef4bd05fb938a8a868ff70e9fedbe2Affected
  • 6b8d4a6a03144c5996f98db7f8256267b0d72a3a to before 1bd68db7beb426ab5a45d81516ed9611284affc8Affected
  • 6b8d4a6a03144c5996f98db7f8256267b0d72a3a to before 76304cba8cba12bb10d89d016c28403a2dd89a29Affected
  • 6b8d4a6a03144c5996f98db7f8256267b0d72a3a to before 788ae2ae4cf484e248b5bc29211c7ac6510e3e92Affected
  • 6b8d4a6a03144c5996f98db7f8256267b0d72a3a to before ecd06ad0823a90b4420c377ef8917e44e23ee841Affected
  • 6b8d4a6a03144c5996f98db7f8256267b0d72a3a to before 761b7c36addd22c7e6ceb05caaadc3b062d99faaAffected
  • 6b8d4a6a03144c5996f98db7f8256267b0d72a3a to before a78692ec0d1e17a96b09f2349a028878f5b305e4Affected
  • 6b8d4a6a03144c5996f98db7f8256267b0d72a3a to before 72d061ee630d0dbb45c2920d8d19b3861c413e54Affected
LinuxLinux
  • 3.17Affected
  • before 3.17Not affected
  • 5.4.292 through 5.4.*Not affected
  • 5.10.236 through 5.10.*Not affected
  • 5.15.180 through 5.15.*Not affected
  • 6.1.132 through 6.1.*Not affected
  • 6.6.85 through 6.6.*Not affected
  • 6.12.21 through 6.12.*Not affected
  • 6.13.9 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.