CVE-2025-38304: Bluetooth: Fix NULL pointer deference on eir_get_service_data
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Fix NULL pointer deference on eirgetservicedata
The len parameter is considered optional so it can be NULL so it cannot be used for skipping to next entry of EIRSERVICEDATA.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38304?
The severity of CVE-2025-38304 is classified as moderate due to the potential for NULL pointer dereference vulnerabilities.
How do I fix CVE-2025-38304?
To fix CVE-2025-38304, update your Linux kernel to the latest patched version provided by your distribution.
What systems are affected by CVE-2025-38304?
CVE-2025-38304 affects the Linux kernel, particularly versions prior to the resolution of the vulnerability.
What is the impact of CVE-2025-38304?
The impact of CVE-2025-38304 can lead to system instability or crashes due to NULL pointer dereference.
When was CVE-2025-38304 disclosed?
CVE-2025-38304 was disclosed with an update in the Linux kernel addressing the Bluetooth NULL pointer dereference issue.