---
id: CVE-2025-37792
title: 'Bluetooth: btrtl: Prevent potential NULL dereference'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  Bluetooth: btrtl: Prevent potential NULL dereference

  The btrtl_initialize() function checks that rtl_load_file() either
  had an error or it loaded a zero length file.  …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 <
    c3e9717276affe59fd8213706db021b493e81e34
  - >-
    Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 <
    73dc99c0ea94abd22379b2d82cacbc73f3e18ec1
  - >-
    Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 <
    2d7c60c2a38b4b461fa960ad0995136a6bfe0756
  - >-
    Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 <
    d8441818690d795232331bd8358545c5c95b6b72
  - >-
    Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 <
    3db6605043b50c8bb768547b23e0222f67ceef3e
  - >-
    Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 <
    aaf356f872a60db1e96fb762a62c4607fd22741f
  - >-
    Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 <
    53ceef799dcfc22c734d600811bfc9dd32eaea0a
  - >-
    Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 <
    324dddea321078a6eeb535c2bff5257be74c9799
  - Linux 4.19
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T20:40:48.534621Z'
published: '2025-05-01'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T20:41:54.091Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-37792'
references:
  - url: 'https://git.kernel.org/stable/c/c3e9717276affe59fd8213706db021b493e81e34'
  - url: 'https://git.kernel.org/stable/c/73dc99c0ea94abd22379b2d82cacbc73f3e18ec1'
  - url: 'https://git.kernel.org/stable/c/2d7c60c2a38b4b461fa960ad0995136a6bfe0756'
  - url: 'https://git.kernel.org/stable/c/d8441818690d795232331bd8358545c5c95b6b72'
  - url: 'https://git.kernel.org/stable/c/3db6605043b50c8bb768547b23e0222f67ceef3e'
  - url: 'https://git.kernel.org/stable/c/aaf356f872a60db1e96fb762a62c4607fd22741f'
  - url: 'https://git.kernel.org/stable/c/53ceef799dcfc22c734d600811bfc9dd32eaea0a'
  - url: 'https://git.kernel.org/stable/c/324dddea321078a6eeb535c2bff5257be74c9799'
tags:
  - cve.org
epss: 0.00199
epssPercentile: 0.0981
ingestedAt: '2026-11-05T22:38:31.870Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btrtl: Prevent potential NULL dereference

The btrtl_initialize() function checks that rtl_load_file() either
had an error or it loaded a zero length file.  However, if it loaded
a zero length file then the error code is not set correctly.  It
results in an error pointer vs NULL bug, followed by a NULL pointer
dereference.  This was detected by Smatch:

drivers/bluetooth/btrtl.c:592 btrtl_initialize() warn: passing zero to 'ERR_PTR'

## Affected

- `Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 < c3e9717276affe59fd8213706db021b493e81e34`
- `Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 < 73dc99c0ea94abd22379b2d82cacbc73f3e18ec1`
- `Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 < 2d7c60c2a38b4b461fa960ad0995136a6bfe0756`
- `Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 < d8441818690d795232331bd8358545c5c95b6b72`
- `Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 < 3db6605043b50c8bb768547b23e0222f67ceef3e`
- `Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 < aaf356f872a60db1e96fb762a62c4607fd22741f`
- `Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 < 53ceef799dcfc22c734d600811bfc9dd32eaea0a`
- `Linux >= 26503ad25de8c7c93a2037f919c2e49a62cf65f1 < 324dddea321078a6eeb535c2bff5257be74c9799`
- `Linux 4.19`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.