---
id: CVE-2025-38641
title: 'Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure

  Avoid potential NULL pointer dereference by checking the return value of
  kmalloc and handling alloc…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 7d70989fcea7f79afe018a7e34d3486406c7a94e <
    5029d80bfc30b60ff57c70ccb04e027acb404f6a
  - >-
    Linux >= 7d70989fcea7f79afe018a7e34d3486406c7a94e <
    b505902c66a282dcb01bcdc015aa1fdfaaa075db
  - Linux 6.16
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:05:37.915737Z'
published: '2025-08-22'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:12:50.148Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-38641'
references:
  - url: 'https://git.kernel.org/stable/c/5029d80bfc30b60ff57c70ccb04e027acb404f6a'
  - url: 'https://git.kernel.org/stable/c/b505902c66a282dcb01bcdc015aa1fdfaaa075db'
tags:
  - cve.org
epss: 0.0014
epssPercentile: 0.03379
ingestedAt: '2026-11-05T22:38:32.003Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure

Avoid potential NULL pointer dereference by checking the return value of
kmalloc and handling allocation failure properly.

## Affected

- `Linux >= 7d70989fcea7f79afe018a7e34d3486406c7a94e < 5029d80bfc30b60ff57c70ccb04e027acb404f6a`
- `Linux >= 7d70989fcea7f79afe018a7e34d3486406c7a94e < b505902c66a282dcb01bcdc015aa1fdfaaa075db`
- `Linux 6.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.