CVE-2025-37792 Details
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: Prevent potential NULL dereference The btrtl_initialize() function checks that rtl_load_file() either had an error or it loaded a zero length file. However, if it loaded a zero length file then the error code is not set correctly. It results in an error pointer vs NULL bug, followed by a NULL pointer dereference. This was detected by Smatch: drivers/bluetooth/btrtl.c:592 btrtl_initialize() warn: passing zero to 'ERR_PTR'
A vulnerability in the Linux kernel's Bluetooth btrtl component can lead to a NULL pointer dereference. The issue arises in the btrtl_initialize() function, where the rtl_load_file() function's error handling is inadequate. If rtl_load_file() loads a file of zero length, the error code is not properly set, creating a situation where an error pointer is passed instead of NULL. This flaw, detected by the static analysis tool Smatch, can result in a NULL pointer dereference, potentially causing a denial-of-service condition.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/2d7c60c2a38b4b461fa960ad0995136a6bfe0756 | kernel.org | Patch |
| https://git.kernel.org/stable/c/324dddea321078a6eeb535c2bff5257be74c9799 | kernel.org | Patch |
| https://git.kernel.org/stable/c/3db6605043b50c8bb768547b23e0222f67ceef3e | kernel.org | Patch |
| https://git.kernel.org/stable/c/53ceef799dcfc22c734d600811bfc9dd32eaea0a | kernel.org | Patch |
| https://git.kernel.org/stable/c/73dc99c0ea94abd22379b2d82cacbc73f3e18ec1 | kernel.org | Patch |
| https://git.kernel.org/stable/c/aaf356f872a60db1e96fb762a62c4607fd22741f | kernel.org | Patch |
| https://git.kernel.org/stable/c/c3e9717276affe59fd8213706db021b493e81e34 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d8441818690d795232331bd8358545c5c95b6b72 | kernel.org | Patch |
| https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html | CVE | Mailing List |
| https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html | CVE | Mailing List |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.19, < 5.4.293 >= 5.5, < 5.10.237 >= 5.11, < 5.15.181 >= 5.16, < 6.1.135 >= 6.2, < 6.6.88 >= 6.7, < 6.12.25 >= 6.13, < 6.14.4 6.15 rc1 6.15 rc2 |
CPE
Remediation
| |
| debian debian linux | 11.0 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Nov 4, 2025 | Initial Analysis | [email protected] |
| Nov 3, 2025 | CVE Modified | CVE |
| May 2, 2025 | CVE Modified | kernel.org |
| May 1, 2025 | New CVE Received | kernel.org |