In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: btrtl: Prevent potential NULL dereference
The btrtlinitialize() function checks that rtlload_file() either had an error or it loaded a zero length file. However, if it loaded a zero length file then the error code is not set correctly. It results in an error pointer vs NULL bug, followed by a NULL pointer dereference. This was detected by Smatch:
drivers/bluetooth/btrtl.c:592 btrtlinitialize() warn: passing zero to 'ERRPTR'
[
{
"digest": {
"length": 2752.0,
"function_hash": "305428265797672690126104363883035898410"
},
"target": {
"file": "drivers/bluetooth/btrtl.c",
"function": "btrtl_initialize"
},
"signature_type": "Function",
"id": "CVE-2025-37792-059f56a5",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8441818690d795232331bd8358545c5c95b6b72"
},
{
"digest": {
"length": 1748.0,
"function_hash": "55856743210648429552053578258741373515"
},
"target": {
"file": "drivers/bluetooth/btrtl.c",
"function": "btrtl_initialize"
},
"signature_type": "Function",
"id": "CVE-2025-37792-11964c37",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c3e9717276affe59fd8213706db021b493e81e34"
},
{
"digest": {
"line_hashes": [
"243489326809208570558016888528228162563",
"99139752524817697403426729769966348467",
"292908934703991119779283280732928820843",
"236264559131601981320119962887487166264"
],
"threshold": 0.9
},
"target": {
"file": "drivers/bluetooth/btrtl.c"
},
"signature_type": "Line",
"id": "CVE-2025-37792-14bd1868",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aaf356f872a60db1e96fb762a62c4607fd22741f"
},
{
"digest": {
"line_hashes": [
"243489326809208570558016888528228162563",
"99139752524817697403426729769966348467",
"292908934703991119779283280732928820843",
"236264559131601981320119962887487166264"
],
"threshold": 0.9
},
"target": {
"file": "drivers/bluetooth/btrtl.c"
},
"signature_type": "Line",
"id": "CVE-2025-37792-161f6df9",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3db6605043b50c8bb768547b23e0222f67ceef3e"
},
{
"digest": {
"length": 3411.0,
"function_hash": "207193207577998158698291444636408694693"
},
"target": {
"file": "drivers/bluetooth/btrtl.c",
"function": "btrtl_initialize"
},
"signature_type": "Function",
"id": "CVE-2025-37792-1b2af87f",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@53ceef799dcfc22c734d600811bfc9dd32eaea0a"
},
{
"digest": {
"line_hashes": [
"243489326809208570558016888528228162563",
"99139752524817697403426729769966348467",
"292908934703991119779283280732928820843",
"236264559131601981320119962887487166264"
],
"threshold": 0.9
},
"target": {
"file": "drivers/bluetooth/btrtl.c"
},
"signature_type": "Line",
"id": "CVE-2025-37792-1f8a018c",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@53ceef799dcfc22c734d600811bfc9dd32eaea0a"
},
{
"digest": {
"length": 3411.0,
"function_hash": "207193207577998158698291444636408694693"
},
"target": {
"file": "drivers/bluetooth/btrtl.c",
"function": "btrtl_initialize"
},
"signature_type": "Function",
"id": "CVE-2025-37792-283c8100",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@324dddea321078a6eeb535c2bff5257be74c9799"
},
{
"digest": {
"line_hashes": [
"243489326809208570558016888528228162563",
"99139752524817697403426729769966348467",
"292908934703991119779283280732928820843",
"236264559131601981320119962887487166264"
],
"threshold": 0.9
},
"target": {
"file": "drivers/bluetooth/btrtl.c"
},
"signature_type": "Line",
"id": "CVE-2025-37792-2bd27ddf",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73dc99c0ea94abd22379b2d82cacbc73f3e18ec1"
},
{
"digest": {
"line_hashes": [
"243489326809208570558016888528228162563",
"99139752524817697403426729769966348467",
"292908934703991119779283280732928820843",
"236264559131601981320119962887487166264"
],
"threshold": 0.9
},
"target": {
"file": "drivers/bluetooth/btrtl.c"
},
"signature_type": "Line",
"id": "CVE-2025-37792-66a4e37d",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c3e9717276affe59fd8213706db021b493e81e34"
},
{
"digest": {
"length": 3411.0,
"function_hash": "207193207577998158698291444636408694693"
},
"target": {
"file": "drivers/bluetooth/btrtl.c",
"function": "btrtl_initialize"
},
"signature_type": "Function",
"id": "CVE-2025-37792-66daae32",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aaf356f872a60db1e96fb762a62c4607fd22741f"
},
{
"digest": {
"line_hashes": [
"243489326809208570558016888528228162563",
"99139752524817697403426729769966348467",
"292908934703991119779283280732928820843",
"236264559131601981320119962887487166264"
],
"threshold": 0.9
},
"target": {
"file": "drivers/bluetooth/btrtl.c"
},
"signature_type": "Line",
"id": "CVE-2025-37792-71f70551",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d8441818690d795232331bd8358545c5c95b6b72"
},
{
"digest": {
"line_hashes": [
"243489326809208570558016888528228162563",
"99139752524817697403426729769966348467",
"292908934703991119779283280732928820843",
"236264559131601981320119962887487166264"
],
"threshold": 0.9
},
"target": {
"file": "drivers/bluetooth/btrtl.c"
},
"signature_type": "Line",
"id": "CVE-2025-37792-a8cdc6cb",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@324dddea321078a6eeb535c2bff5257be74c9799"
},
{
"digest": {
"length": 3411.0,
"function_hash": "207193207577998158698291444636408694693"
},
"target": {
"file": "drivers/bluetooth/btrtl.c",
"function": "btrtl_initialize"
},
"signature_type": "Function",
"id": "CVE-2025-37792-b951bf36",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3db6605043b50c8bb768547b23e0222f67ceef3e"
},
{
"digest": {
"length": 2716.0,
"function_hash": "219245390694500285062446221093374707185"
},
"target": {
"file": "drivers/bluetooth/btrtl.c",
"function": "btrtl_initialize"
},
"signature_type": "Function",
"id": "CVE-2025-37792-bf8aa143",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2d7c60c2a38b4b461fa960ad0995136a6bfe0756"
},
{
"digest": {
"length": 1748.0,
"function_hash": "55856743210648429552053578258741373515"
},
"target": {
"file": "drivers/bluetooth/btrtl.c",
"function": "btrtl_initialize"
},
"signature_type": "Function",
"id": "CVE-2025-37792-f11f459b",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@73dc99c0ea94abd22379b2d82cacbc73f3e18ec1"
},
{
"digest": {
"line_hashes": [
"243489326809208570558016888528228162563",
"99139752524817697403426729769966348467",
"292908934703991119779283280732928820843",
"236264559131601981320119962887487166264"
],
"threshold": 0.9
},
"target": {
"file": "drivers/bluetooth/btrtl.c"
},
"signature_type": "Line",
"id": "CVE-2025-37792-f80203e0",
"signature_version": "v1",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2d7c60c2a38b4b461fa960ad0995136a6bfe0756"
}
]