CVE-2025-21937: Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Add check for mgmtallocskb() in mgmtremotename()
Add check for the return value of mgmtallocskb() in mgmtremotename() to prevent null pointer dereference.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the Linux kernel Bluetooth function mgmt_remote_name(), add a check for the return value of mgmt_alloc_skb() to prevent a null pointer dereference.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21937?
The severity of CVE-2025-21937 is classified as high due to the risk of a null pointer dereference affecting Bluetooth functionality.
How do I fix CVE-2025-21937?
To fix CVE-2025-21937, update to the latest version of the Linux kernel that includes the patch addressing this vulnerability.
What are the potential impacts of CVE-2025-21937?
Potential impacts of CVE-2025-21937 include system crashes and denial of service due to null pointer dereference in Bluetooth services.
Which versions of the Linux kernel are affected by CVE-2025-21937?
CVE-2025-21937 affects certain versions of the Linux kernel before the patch was applied, specifically those utilizing Bluetooth management functions.
Is CVE-2025-21937 exploitable remotely?
Yes, CVE-2025-21937 is exploitable remotely, potentially allowing an attacker to trigger a denial of service through Bluetooth connections.