CVE-2025-38304

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A NULL pointer dereference issue was resolved in the Bluetooth stack within the Linux kernel, specifically in the eir get service data function. The len parameter within this function is optional and can be NULL, leading to a potential issue when attempting to iterate through EIR SERVICE DATA entries.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.