CVE-2025-21937
Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
01 Apr 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
Add check for the return value of mgmt_alloc_skb() in
mgmt_remote_name() to prevent null pointer dereference.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/37785a01040cb5d11ed0ddbcbf78491fcd073161https://git.kernel.org/stable/c/69fb168b88e4d62cb31cdd725b67ccc5216cfcafhttps://git.kernel.org/stable/c/88310caff68ae69d0574859f7926a59c1da2d60bhttps://git.kernel.org/stable/c/c5845c73cbacf5704169283ef29ca02031a36564https://git.kernel.org/stable/c/f2176a07e7b19f73e05c805cf3d130a2999154cbhttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html