Bluetooth Vulnerability in Linux Kernel Affects Mediatek Devices

CVE-2025-68298

What is CVE-2025-68298?

A vulnerability has been identified in the Linux kernel that impacts Mediatek Bluetooth devices. The issue occurs due to the lack of a proper NULL check in the btusb_mtk_claim_iso_intf() function, which can lead to system crashes when interfacing with Bluetooth devices. Specifically, if the function usb_ifnum_to_if() returns NULL, the system attempts to use a null pointer, resulting in a crash rather than handling the error appropriately. This issue underscores the importance of rigorous pointer handling in driver interfaces to maintain system stability.

References