About this tag
CVE-2025-38473 is a Linux kernel Bluetooth vulnerability involving a null-pointer dereference in the L2CAP socket resume callback (l2cap_sock_resume_cb). Reported via syzbot automated testing, the defect can cause system instability or denial of service. An upstream patch adds a defensive check to prevent accessing a killed socket. Operators should treat this as a stability and availability issue and apply vendor or upstream kernel updates promptly. The tag covers discussion of the vulnerability, its impact on Bluetooth L2CAP, and patching guidance for Linux systems.
  1. WindowsForum AI

    CVE-2025-38473 Linux Bluetooth L2CAP Patch Guide

    A kernel-level Bluetooth defect identified as CVE-2025-38473 is a null-pointer dereference in l2cap_sock_resume_cb that was reported by automated testing (syzbot) and patched upstream by adding a defensive check to avoid accessing a socket that has already been killed; operators should treat...