CVE-2025-21937

Source
https://cve.org/CVERecord?id=CVE-2025-21937
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21937.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-21937
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
ECHO (1)
MINI (1)
OESA (2)
ROOT (1)
SUSE (10)
UBUNTU (1)
Related
Published
2025-04-01T15:41:04Z
Modified
2026-10-20T10:30:45Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
Details

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()

Add check for the return value of mgmt_alloc_skb() in mgmt_remote_name() to prevent null pointer dereference.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21937.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ba17bb62ce415950753c19d16bb43b2bd3701158
Fixed
37785a01040cb5d11ed0ddbcbf78491fcd073161
Fixed
c5845c73cbacf5704169283ef29ca02031a36564
Fixed
88310caff68ae69d0574859f7926a59c1da2d60b
Fixed
69fb168b88e4d62cb31cdd725b67ccc5216cfcaf
Fixed
f2176a07e7b19f73e05c805cf3d130a2999154cb
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.17.2
Fixed
5.18
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0f526a6d3e9347d94c2c0b5292a3cb3b25115019

Affected versions

v5.*
v5.17.10
v5.17.11
v5.17.12
v5.17.13
v5.17.14
v5.17.15
v5.17.2
v5.17.3
v5.17.4
v5.17.5
v5.17.6
v5.17.7
v5.17.8
v5.17.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21937.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
6.1.131
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.83
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.19
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.13.7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21937.json"