CVE-2025-21936: Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Add check for mgmtallocskb() in mgmtdeviceconnected()
Add check for the return value of mgmtallocskb() in mgmtdeviceconnected() to prevent null pointer dereference.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Add a null/return-value check for mgmt_alloc_skb() in mgmt_device_connected() to prevent null pointer dereference.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21936?
CVE-2025-21936 has a moderate severity rating due to the potential for null pointer dereference leading to denial of service.
How do I fix CVE-2025-21936?
To fix CVE-2025-21936, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What component is affected by CVE-2025-21936?
CVE-2025-21936 affects the Bluetooth functionality in the Linux kernel.
What is the primary vulnerability caused by CVE-2025-21936?
CVE-2025-21936 can cause a null pointer dereference when allocating an skb in the management device connected function.
Is CVE-2025-21936 a recent vulnerability?
Yes, CVE-2025-21936 is a recent vulnerability identified in the Linux kernel's Bluetooth implementation.