Riskcovery

CVE-2025-37792

Bluetooth: btrtl: Prevent potential NULL dereference

State
Published
Severity
Not scored
Published
May 1, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btrtl: Prevent potential NULL dereference

The btrtl_initialize() function checks that rtl_load_file() either had an error or it loaded a zero length file. However, if it loaded a zero length file then the error code is not set correctly. It results in an error pointer vs NULL bug, followed by a NULL pointer dereference. This was detected by Smatch:

drivers/bluetooth/btrtl.c:592 btrtl_initialize() warn: passing zero to 'ERR_PTR'

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 26503ad25de8c7c93a2037f919c2e49a62cf65f1 to before c3e9717276affe59fd8213706db021b493e81e34Affected
  • 26503ad25de8c7c93a2037f919c2e49a62cf65f1 to before 73dc99c0ea94abd22379b2d82cacbc73f3e18ec1Affected
  • 26503ad25de8c7c93a2037f919c2e49a62cf65f1 to before 2d7c60c2a38b4b461fa960ad0995136a6bfe0756Affected
  • 26503ad25de8c7c93a2037f919c2e49a62cf65f1 to before d8441818690d795232331bd8358545c5c95b6b72Affected
  • 26503ad25de8c7c93a2037f919c2e49a62cf65f1 to before 3db6605043b50c8bb768547b23e0222f67ceef3eAffected
  • 26503ad25de8c7c93a2037f919c2e49a62cf65f1 to before aaf356f872a60db1e96fb762a62c4607fd22741fAffected
  • 26503ad25de8c7c93a2037f919c2e49a62cf65f1 to before 53ceef799dcfc22c734d600811bfc9dd32eaea0aAffected
  • 26503ad25de8c7c93a2037f919c2e49a62cf65f1 to before 324dddea321078a6eeb535c2bff5257be74c9799Affected
LinuxLinux
  • 4.19Affected
  • before 4.19Not affected
  • 5.4.293 through 5.4.*Not affected
  • 5.10.237 through 5.10.*Not affected
  • 5.15.181 through 5.15.*Not affected
  • 6.1.135 through 6.1.*Not affected
  • 6.6.88 through 6.6.*Not affected
  • 6.12.25 through 6.12.*Not affected
  • 6.14.4 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.