CVE-2025-21937
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Apr 1, 2025
Updated: Apr 10, 2025
CWE ID 476
Summary
CVE-2025-21937 is a vulnerability discovered in the Linux kernel's Bluetooth subsystem. This issue involved a null pointer dereference in the 'mgmt_remote_name()' function due to the lack of a check on the return value of 'mgmt_alloc_skb()'. If exploited, this vulnerability could lead to a denial of service or potentially more serious consequences. The Linux community has released a patch to address this issue by adding the necessary check for the return value of 'mgmt_alloc_skb()' in 'mgmt_remote_name()'.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.