Critical Bluetooth Vulnerability in Linux Kernel: CVE-2025-38473
Summary
CVE-2025-38473: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() syzbot reported null-ptr-deref in l2cap_sock_resume_cb(). Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to applications. It supports a wide range of functionalities, including process management, memory management, and device control. The kernel is crucial for system stability and performance, and vulnerabilities within it can lead to severe security risks, including unauthorized access and system crashes. This specific vulnerability affects the Bluetooth subsystem, which is responsible for managing Bluetooth communications and connections.
Vulnerability Detail
CVE-2025-38473 is a critical vulnerability in the Linux kernel's Bluetooth implementation, specifically in the l2cap_sock_resume_cb() function. This vulnerability arises from a null pointer dereference, which can lead to system crashes or denial of service. The issue was reported by syzbot and is similar to a previously fixed use-after-free error. The vulnerability occurs when the function attempts to access a socket that has already been killed, leading to potential exploitation by attackers to disrupt Bluetooth services or crash the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid using Bluetooth functionalities until the kernel is updated. Additionally, ensure that any Bluetooth devices are disconnected to minimize the risk of exploitation.
Conclusion
CVE-2025-38473 is a significant vulnerability in the Linux kernel's Bluetooth subsystem that can lead to serious security issues. Users are advised to update their systems promptly and consider using Vulert for ongoing monitoring of vulnerabilities. By staying informed and proactive, users can protect their systems from potential exploits.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38473 is a vulnerability in the Linux kernel's Bluetooth subsystem that can lead to null pointer dereferences, causing system crashes.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The risks include potential denial of service, system crashes, and unauthorized access to Bluetooth communications.
It is recommended to regularly check for updates and apply them promptly to ensure your system is secure against known vulnerabilities.
Yes, users should update to the latest version of the Linux kernel that includes the patch for CVE-2025-38473.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
