{"id":"CVE-2025-38641","title":"Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btusb: Fix potential NULL dereference on kmalloc failure\n\nAvoid potential NULL pointer dereference by checking the return value of\nkmalloc and handling alloc…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 7d70989fcea7f79afe018a7e34d3486406c7a94e < 5029d80bfc30b60ff57c70ccb04e027acb404f6a","Linux >= 7d70989fcea7f79afe018a7e34d3486406c7a94e < b505902c66a282dcb01bcdc015aa1fdfaaa075db","Linux 6.16"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:05:37.915737Z"},"published":"2025-08-22","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:12:50.148Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-38641","references":[{"url":"https://git.kernel.org/stable/c/5029d80bfc30b60ff57c70ccb04e027acb404f6a"},{"url":"https://git.kernel.org/stable/c/b505902c66a282dcb01bcdc015aa1fdfaaa075db"}],"tags":["cve.org"],"epss":0.0014,"epssPercentile":0.03379,"ingestedAt":"2026-11-05T22:38:32.003Z","slug":"CVE-2025-38641","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btusb: Fix potential NULL dereference on kmalloc failure\n\nAvoid potential NULL pointer dereference by checking the return value of\nkmalloc and handling allocation failure properly.\n\n## Affected\n\n- `Linux >= 7d70989fcea7f79afe018a7e34d3486406c7a94e < 5029d80bfc30b60ff57c70ccb04e027acb404f6a`\n- `Linux >= 7d70989fcea7f79afe018a7e34d3486406c7a94e < b505902c66a282dcb01bcdc015aa1fdfaaa075db`\n- `Linux 6.16`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}