NetSight
IP …
medium5.5

CVE-2025-37792

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Prevent potential NULL dereference The btrtl_initialize() function checks…

Impact

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Prevent potential NULL dereference The btrtl_initialize() function checks that rtl_load_file() either had an error or it loaded a zero length file. However, if it loaded a zero length file then the error code is not set correctly. It results in an error pointer vs NULL bug, followed by a NULL pointer dereference. This was detected by Smatch: drivers/bluetooth/btrtl.c:592 btrtl_initialize() warn: passing zero to 'ERR_PTR'

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.19 before 5.4.293
from 5.5 before 5.10.237
from 5.11 before 5.15.181
from 5.16 before 6.1.135
from 6.2 before 6.6.88
from 6.7 before 6.12.25
DebianDebian Linux
Version 11.0

Weakness classification

CWE-476

References