Bluetooth Vulnerability in Linux Kernel Affecting BTUSB Driver

CVE-2025-38641

What is CVE-2025-38641?

A vulnerability in the Linux kernel's Bluetooth subsystem specifically within the btusb driver was identified due to inadequate handling of the kmalloc function's return value. This oversight could lead to a potential NULL pointer dereference, causing instability and unexpected behavior in systems utilizing Bluetooth functionality. It is recommended to apply the latest patches to ensure proper memory allocation checks are in place, mitigating the risk of such failures.

References