CVE-2025-37792

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential NULL dereference issue has been identified in the Linux kernel's Bluetooth component, specifically in the btrtl initialize() function. This function checks if rtl load file() had an error or loaded a zero-length file. However, if a zero-length file is loaded, the error code is not set correctly, resulting in an error pointer vs NULL bug, followed by a NULL pointer dereference. This issue was detected by Smatch in the drivers/bluetooth/btrtl.c file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.