Riskcovery

CVE-2025-38304

Bluetooth: Fix NULL pointer deference on eir_get_service_data

State
Published
Severity
Not scored
Published
Jul 10, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix NULL pointer deference on eir_get_service_data

The len parameter is considered optional so it can be NULL so it cannot be used for skipping to next entry of EIR_SERVICE_DATA.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8f9ae5b3ae80f168a6224529e3787f4fb27f299a to before 497c9d2d7d3983826bb02c10fb4a5818be6550fbAffected
  • 8f9ae5b3ae80f168a6224529e3787f4fb27f299a to before 4bf29910570666e668a60d953f8da78e95bb7fa2Affected
  • 8f9ae5b3ae80f168a6224529e3787f4fb27f299a to before 842f7c3154d5b25ca11753c02ee8cf6ee64c0142Affected
  • 8f9ae5b3ae80f168a6224529e3787f4fb27f299a to before 7d99cc0f8e6fa0f35570887899f178122a61d44eAffected
  • 8f9ae5b3ae80f168a6224529e3787f4fb27f299a to before 20a2aa01f5aeb6daad9aeaa7c33dd512c58d81ebAffected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.1.142 through 6.1.*Not affected
  • 6.6.94 through 6.6.*Not affected
  • 6.12.34 through 6.12.*Not affected
  • 6.15.3 through 6.15.*Not affected
  • 6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.