CVE-2025-22007

Summary

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix error code in chan_alloc_skb_cb()

The chan_alloc_skb_cb() function is supposed to return error pointers on error. Returning NULL will lead to a NULL dereference.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux6b8d4a6a03144c5996f98db7f8256267b0d72a3a < b3d607e36fef4bd05fb938a8a868ff70e9fedbe2affected
LinuxLinux6b8d4a6a03144c5996f98db7f8256267b0d72a3a < 1bd68db7beb426ab5a45d81516ed9611284affc8affected
LinuxLinux6b8d4a6a03144c5996f98db7f8256267b0d72a3a < 76304cba8cba12bb10d89d016c28403a2dd89a29affected
LinuxLinux6b8d4a6a03144c5996f98db7f8256267b0d72a3a < 788ae2ae4cf484e248b5bc29211c7ac6510e3e92affected
LinuxLinux6b8d4a6a03144c5996f98db7f8256267b0d72a3a < ecd06ad0823a90b4420c377ef8917e44e23ee841affected
LinuxLinux6b8d4a6a03144c5996f98db7f8256267b0d72a3a < 761b7c36addd22c7e6ceb05caaadc3b062d99faaaffected
LinuxLinux6b8d4a6a03144c5996f98db7f8256267b0d72a3a < a78692ec0d1e17a96b09f2349a028878f5b305e4affected
LinuxLinux6b8d4a6a03144c5996f98db7f8256267b0d72a3a < 72d061ee630d0dbb45c2920d8d19b3861c413e54affected
LinuxLinux3.17affected
LinuxLinux0 < 3.17unaffected
LinuxLinux5.4.292 <= 5.4.*unaffected
LinuxLinux5.10.236 <= 5.10.*unaffected
LinuxLinux5.15.180 <= 5.15.*unaffected
LinuxLinux6.1.132 <= 6.1.*unaffected
LinuxLinux6.6.85 <= 6.6.*unaffected
LinuxLinux6.12.21 <= 6.12.*unaffected
LinuxLinux6.13.9 <= 6.13.*unaffected
LinuxLinux6.14 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References