{"id":"CVE-2025-37792","state":"PUBLISHED","title":"Bluetooth: btrtl: Prevent potential NULL dereference","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btrtl: Prevent potential NULL dereference\n\nThe btrtl_initialize() function checks that rtl_load_file() either\nhad an error or it loaded a zero length file.  However, if it loaded\na zero length file then the error code is not set correctly.  It\nresults in an error pointer vs NULL bug, followed by a NULL pointer\ndereference.  This was detected by Smatch:\n\ndrivers/bluetooth/btrtl.c:592 btrtl_initialize() warn: passing zero to 'ERR_PTR'","publishedAt":"2025-05-01T13:07:24.882Z","updatedAt":"2026-05-11T21:15:16.068Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"c3e9717276affe59fd8213706db021b493e81e34","versionType":"git"},{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"73dc99c0ea94abd22379b2d82cacbc73f3e18ec1","versionType":"git"},{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"2d7c60c2a38b4b461fa960ad0995136a6bfe0756","versionType":"git"},{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"d8441818690d795232331bd8358545c5c95b6b72","versionType":"git"},{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"3db6605043b50c8bb768547b23e0222f67ceef3e","versionType":"git"},{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"aaf356f872a60db1e96fb762a62c4607fd22741f","versionType":"git"},{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"53ceef799dcfc22c734d600811bfc9dd32eaea0a","versionType":"git"},{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"324dddea321078a6eeb535c2bff5257be74c9799","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/bluetooth/btrtl.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.19","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.19","versionType":"semver"},{"version":"5.4.293","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.237","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.181","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.135","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.88","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.25","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.14.4","status":"unaffected","lessThanOrEqual":"6.14.*","versionType":"semver"},{"version":"6.15","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/bluetooth/btrtl.c"]}],"references":["https://git.kernel.org/stable/c/c3e9717276affe59fd8213706db021b493e81e34","https://git.kernel.org/stable/c/73dc99c0ea94abd22379b2d82cacbc73f3e18ec1","https://git.kernel.org/stable/c/2d7c60c2a38b4b461fa960ad0995136a6bfe0756","https://git.kernel.org/stable/c/d8441818690d795232331bd8358545c5c95b6b72","https://git.kernel.org/stable/c/3db6605043b50c8bb768547b23e0222f67ceef3e","https://git.kernel.org/stable/c/aaf356f872a60db1e96fb762a62c4607fd22741f","https://git.kernel.org/stable/c/53ceef799dcfc22c734d600811bfc9dd32eaea0a","https://git.kernel.org/stable/c/324dddea321078a6eeb535c2bff5257be74c9799","https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html","https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html"],"weaknesses":[],"ingestedAt":"2026-10-29T20:09:03.054Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/37xxx/CVE-2025-37792.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-37792","state":"PUBLISHED","datePublished":"2025-05-01T13:07:24.882Z","dateUpdated":"2026-05-11T21:15:16.068Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-04-16T04:51:23.941Z"},"containers":{"cna":{"title":"Bluetooth: btrtl: Prevent potential NULL dereference","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btrtl: Prevent potential NULL dereference\n\nThe btrtl_initialize() function checks that rtl_load_file() either\nhad an error or it loaded a zero length file.  However, if it loaded\na zero length file then the error code is not set correctly.  It\nresults in an error pointer vs NULL bug, followed by a NULL pointer\ndereference.  This was detected by Smatch:\n\ndrivers/bluetooth/btrtl.c:592 btrtl_initialize() warn: passing zero to 'ERR_PTR'"}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"c3e9717276affe59fd8213706db021b493e81e34","versionType":"git"},{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"73dc99c0ea94abd22379b2d82cacbc73f3e18ec1","versionType":"git"},{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"2d7c60c2a38b4b461fa960ad0995136a6bfe0756","versionType":"git"},{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"d8441818690d795232331bd8358545c5c95b6b72","versionType":"git"},{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"3db6605043b50c8bb768547b23e0222f67ceef3e","versionType":"git"},{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"aaf356f872a60db1e96fb762a62c4607fd22741f","versionType":"git"},{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"53ceef799dcfc22c734d600811bfc9dd32eaea0a","versionType":"git"},{"version":"26503ad25de8c7c93a2037f919c2e49a62cf65f1","status":"affected","lessThan":"324dddea321078a6eeb535c2bff5257be74c9799","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/bluetooth/btrtl.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"4.19","status":"affected"},{"version":"0","status":"unaffected","lessThan":"4.19","versionType":"semver"},{"version":"5.4.293","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.237","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.181","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.135","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.88","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.25","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.14.4","status":"unaffected","lessThanOrEqual":"6.14.*","versionType":"semver"},{"version":"6.15","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/bluetooth/btrtl.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/c3e9717276affe59fd8213706db021b493e81e34"},{"url":"https://git.kernel.org/stable/c/73dc99c0ea94abd22379b2d82cacbc73f3e18ec1"},{"url":"https://git.kernel.org/stable/c/2d7c60c2a38b4b461fa960ad0995136a6bfe0756"},{"url":"https://git.kernel.org/stable/c/d8441818690d795232331bd8358545c5c95b6b72"},{"url":"https://git.kernel.org/stable/c/3db6605043b50c8bb768547b23e0222f67ceef3e"},{"url":"https://git.kernel.org/stable/c/aaf356f872a60db1e96fb762a62c4607fd22741f"},{"url":"https://git.kernel.org/stable/c/53ceef799dcfc22c734d600811bfc9dd32eaea0a"},{"url":"https://git.kernel.org/stable/c/324dddea321078a6eeb535c2bff5257be74c9799"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T21:15:16.068Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19","versionEndExcluding":"5.4.293"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19","versionEndExcluding":"5.10.237"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19","versionEndExcluding":"5.15.181"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19","versionEndExcluding":"6.1.135"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19","versionEndExcluding":"6.6.88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19","versionEndExcluding":"6.12.25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19","versionEndExcluding":"6.14.4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"4.19","versionEndExcluding":"6.15"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html"},{"url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T19:55:19.562Z"}}]}}}