Log in Start free

Vulnerability · Published Apr 1, 2025 · Assigned by Linux

CVE-2025-21936Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 89.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected() Add check for the return value of mgmt_alloc_skb() in mgmt_device_connected() to prevent null pointer dereference.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.133-1DEBIAN-CVE-2025-21936
Debian:13linux6.12.19-1DEBIAN-CVE-2025-21936
Debian:14linux6.12.19-1DEBIAN-CVE-2025-21936
Ubuntu:24.04:LTSlinux6.8.0-84.84USN-7764-1
Ubuntu:24.04:LTSlinux6.8.0-84.84UBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-aws6.8.0-1039.41UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-aws6.8.0-1039.41USN-7764-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1039.41~22.04.1UBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1039.41~22.04.1USN-7766-1
Ubuntu:24.04:LTSlinux-azure6.8.0-1038.44UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-azure6.8.0-1038.44USN-7802-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1018.18~24.04.1USN-7628-1
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1018.18~24.04.1UBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1036.42~22.04.1UBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1036.42~22.04.1USN-7802-1
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1025.27USN-7809-1
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1025.27UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-gcp6.8.0-1040.42USN-7764-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1040.42UBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1016.16~24.04.1UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1016.16~24.04.1USN-7605-1
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1040.42~22.04.1USN-7766-1
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1040.42~22.04.1UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-gke6.8.0-1036.40UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-gke6.8.0-1036.40USN-7764-1
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1023.25UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1023.25USN-7764-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-28.28~24.04.1UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-28.28~24.04.1USN-7605-1
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-85.85~22.04.1UBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-85.85~22.04.1USN-7801-1
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-84.84~22.04.1USN-7764-2
Ubuntu:24.04:LTSlinux-ibm6.8.0-1037.37USN-7779-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1037.37UBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1037.37~22.04.1USN-7779-1
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1037.37~22.04.1UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-84.84.1UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-84.84.1USN-7764-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1015.16~24.04.2UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1015.16~24.04.2USN-7605-2
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-84.84.1~22.04.1USN-7764-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-84.84.1~22.04.1UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1039.42UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1039.42USN-7765-1
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1012.12UBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1039.42~22.04.1USN-7765-1
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1039.42~22.04.1UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1039.42.1UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1039.42.1USN-7765-1
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1010.10UBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1024.24USN-7606-1
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1024.24UBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-oracle6.8.0-1037.38USN-7801-2
Ubuntu:24.04:LTSlinux-oracle6.8.0-1037.38UBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1037.38~22.04.1UBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1037.38~22.04.1USN-7801-3
Ubuntu:24.04:LTSlinux-raspi6.8.0-1039.43UBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-raspi6.8.0-1039.43USN-7790-1
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-84.84~22.04.1UBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-21936
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-21936
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1018.19UBUNTU-CVE-2025-21936

Affected products (as reported)

VendorProductVersions
Linux Linux e96741437ef0a5d18144e790ac894397efda0924 – before dc516e66fb28c61b248b393e2ddd63bd7f104969e96741437ef0a5d18144e790ac894397efda0924 – before bdb1805c248e9694dbb3ffa8867cef2e52cf7261e96741437ef0a5d18144e790ac894397efda0924 – before 7841180342c9a0fd97d54f3e62c7369309b5cd84e96741437ef0a5d18144e790ac894397efda0924 – before 7d39387886ffe220323cbed5c155233c3276926be96741437ef0a5d18144e790ac894397efda0924 – before d8df010f72b8a32aaea393e36121738bb53ed905
Linux Linux 5.17

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References