PT-2025-9968 · Linux+3 · Linux Kernel+3

Published 2025-01-29 · Updated 2025-10-31 · CVE-2025-21827

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel's Bluetooth functionality has been resolved. The issue was related to the Mediatek btusb code, which did not properly claim the device lock when calling usb driver claim interface() from certain paths. This led to errors such as "Failed to claim iso interface" and, in some cases, NULL pointer dereferences. The fix involves adding locks for usb driver claim interface() to prevent these errors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-413

CWE-667

Related Identifiers

BDU:2025-12054

CVE-2025-21827

USN-7521-1

USN-7521-2

USN-7521-3

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Ubuntu

References · 253

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21827.json · Exploit
• https://ubuntu.com/security/CVE-2024-57978 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21811 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21723 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21746 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21745 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21814 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21760 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57982 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21741 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21852 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-58001 · Vendor Advisory
• https://git.kernel.org/stable/c/930e1790b99e5839e1af69d2f7fd808f1fba2df9 · Patch
• https://ubuntu.com/security/CVE-2025-21707 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21780 · Vendor Advisory