CVE-2025-21936
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Apr 1, 2025
Updated: Apr 10, 2025
CWE ID 476
Summary
CVE-2025-21936 is a vulnerability affecting the Linux kernel that has been addressed. This issue involved a null pointer dereference in the Bluetooth subsystem's `mgmt_device_connected()` function. The vulnerability occurred due to a missing check for the return value of `mgmt_alloc_skb()` in this function. Successful exploitation could lead to a denial-of-service or potentially more serious consequences. The Linux community has released a patch to mitigate this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.