In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected() Add check for the return value of mgmt_alloc_skb() in mgmt_device_connected() to prevent null pointer dereference.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/7841180342c9a0fd97d54f3e62c7369309b5cd84 cve-icon cve-icon
https://git.kernel.org/stable/c/7d39387886ffe220323cbed5c155233c3276926b cve-icon cve-icon
https://git.kernel.org/stable/c/bdb1805c248e9694dbb3ffa8867cef2e52cf7261 cve-icon cve-icon
https://git.kernel.org/stable/c/d8df010f72b8a32aaea393e36121738bb53ed905 cve-icon cve-icon
https://git.kernel.org/stable/c/dc516e66fb28c61b248b393e2ddd63bd7f104969 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025040134-CVE-2025-21936-fe95@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-21936 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-21936 cve-icon
History

Wed, 01 Oct 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 10 Apr 2025 18:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Weaknesses CWE-476
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel

Wed, 02 Apr 2025 14:00:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Tue, 01 Apr 2025 16:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected() Add check for the return value of mgmt_alloc_skb() in mgmt_device_connected() to prevent null pointer dereference.
Title Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-04-01T15:41:03.845Z

Updated: 2025-10-01T19:26:32.951Z

Reserved: 2024-12-29T08:45:45.789Z

Link: CVE-2025-21936

cve-icon Vulnrichment

Updated: 2025-10-01T14:37:59.544Z

cve-icon NVD

Status : Modified

Published: 2025-04-01T16:15:24.467

Modified: 2025-10-01T20:18:34.533

Link: CVE-2025-21936

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-04-01T00:00:00Z

Links: CVE-2025-21936 - Bugzilla