Log in Start free

Vulnerability · Published Apr 3, 2025 · Assigned by Linux

CVE-2025-22007Bluetooth: Fix error code in chan_alloc_skb_cb()

Medium 5.5

In plain English

A medium-severity null pointer dereference in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 87.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix error code in chan_alloc_skb_cb() The chan_alloc_skb_cb() function is supposed to return error pointers on error. Returning NULL will lead to a NULL dereference.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.133-1DEBIAN-CVE-2025-22007
Debian:13linux6.12.21-1DEBIAN-CVE-2025-22007
Debian:14linux6.12.21-1DEBIAN-CVE-2025-22007
Ubuntu:22.04:LTSlinux5.15.0-142.152UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux5.15.0-142.152USN-7591-1
Ubuntu:24.04:LTSlinux6.8.0-84.84UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-aws5.15.0-1086.93USN-7591-4
Ubuntu:22.04:LTSlinux-aws5.15.0-1086.93UBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-aws6.8.0-1039.41UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1039.41~22.04.1UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-azure5.15.0-1091.100USN-7597-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1091.100UBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-azure6.8.0-1038.44UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1018.18~24.04.1UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1036.42~22.04.1UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1091.100.1UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1025.27UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-gcp5.15.0-1085.94UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-gcp5.15.0-1085.94USN-7591-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1040.42UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1016.16~24.04.1UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1040.42~22.04.1UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-gke5.15.0-1083.89USN-7591-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1083.89UBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-gke6.8.0-1036.40UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1068.76UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1068.76USN-7591-1
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1023.25UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-28.28~24.04.1UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-85.85~22.04.1UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-ibm5.15.0-1078.81USN-7591-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1078.81UBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-ibm6.8.0-1037.37UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1037.37~22.04.1UBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1081.87USN-7591-5
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1081.87UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-kvm5.15.0-1082.87USN-7591-1
Ubuntu:22.04:LTSlinux-kvm5.15.0-1082.87UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-142.152USN-7591-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-142.152UBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-84.84.1UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1015.16~24.04.2UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-84.84.1~22.04.1UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1080.81USN-7591-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1080.81UBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1039.42UBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1012.12UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1039.42~22.04.1UBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1039.42.1UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1039.39USN-7591-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1039.39UBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1010.10UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1028.28UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1028.28USN-7591-1
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1024.24UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-oracle5.15.0-1083.89USN-7591-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1083.89UBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-oracle6.8.0-1037.38UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1037.38~22.04.1UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-raspi5.15.0-1080.83USN-7591-6
Ubuntu:22.04:LTSlinux-raspi5.15.0-1080.83UBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-raspi6.8.0-1039.43UBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-84.84~22.04.1UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-22007
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1018.19UBUNTU-CVE-2025-22007
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1050.54UBUNTU-CVE-2025-22007

Affected products (as reported)

VendorProductVersions
Linux Linux 6b8d4a6a03144c5996f98db7f8256267b0d72a3a – before b3d607e36fef4bd05fb938a8a868ff70e9fedbe26b8d4a6a03144c5996f98db7f8256267b0d72a3a – before 1bd68db7beb426ab5a45d81516ed9611284affc86b8d4a6a03144c5996f98db7f8256267b0d72a3a – before 76304cba8cba12bb10d89d016c28403a2dd89a296b8d4a6a03144c5996f98db7f8256267b0d72a3a – before 788ae2ae4cf484e248b5bc29211c7ac6510e3e926b8d4a6a03144c5996f98db7f8256267b0d72a3a – before ecd06ad0823a90b4420c377ef8917e44e23ee8416b8d4a6a03144c5996f98db7f8256267b0d72a3a – before 761b7c36addd22c7e6ceb05caaadc3b062d99faa6b8d4a6a03144c5996f98db7f8256267b0d72a3a – before a78692ec0d1e17a96b09f2349a028878f5b305e46b8d4a6a03144c5996f98db7f8256267b0d72a3a – before 72d061ee630d0dbb45c2920d8d19b3861c413e54
Linux Linux 3.17

Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References