Bluetooth Vulnerability in Linux Kernel Affecting Data Integrity

CVE-2025-38473

What is CVE-2025-38473?

A vulnerability has been identified in the Bluetooth subsystem of the Linux kernel, specifically in the function l2cap_sock_resume_cb(). This issue, which pertains to a null-pointer dereference, is triggered when the function attempts to access a socket that has already been terminated. To mitigate this risk, it is essential to implement checks within the function to confirm that the referenced socket is valid before accessing it, thereby safeguarding the integrity of the system and preventing potential exploitation by attackers.

References