Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-22007

17
FAUCET Score

CVE-2025-22007 is a medium-severity vulnerability in the Linux kernel's Bluetooth component, specifically within the chan_alloc_skb_cb() function. It involves a NULL dereference due to incorrect error handling, where NULL is returned instead of an error pointer. This flaw could lead to a denial of service (A:H) if exploited by a local attacker with low privileges (AV:L/AC:L/PR:L). There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
>= 3.17, < 6.1.132CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.6.85CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.12.21CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.13, < 6.13.9CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
6.14CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.19%
Probability of exploitation in next 30 days
EPSS Percentile
9.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0019 is in the 46th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (11)

autodeskpatch availablevia llm_extracted
View patch
freepbxpatch availablevia llm_extracted
View patch
honeywellpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: 17465-17084Fixed in: 6.6.85.1-2
microsoftpatch availablevia msrc
Product: 19288-17084Fixed in: 6.6.85.1-2
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.82.1-1 on Azure Linux 3.0Fixed in: 6.6.85.1-2
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.85.1-2 on Azure Linux 3.0Fixed in: 6.6.85.1-2
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0Fixed in: 5.15.180.1-1
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.182.1-1 on CBL Mariner 2.0
microsoftpatch availablevia msrc
Product: 17095-16823Fixed in: 5.15.180.1-1
microsoftpatch availablevia msrc
Product: 19682-17086

Vendor Advisories (5)

honeywellllm-honeywell-c82b5cfda9df97a3CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
autodeskllm-autodesk-c365b674a2ff5a3aCRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
freepbxllm-freepbx-e54908c7967265f6CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
microsoft2025-Apr/CVE-2025-22007

Bluetooth: Fix error code in chan_alloc_skb_cb()

Apr 8, 2025
redhatCVE-2025-22007Moderate

kernel: Bluetooth: Fix error code in chan_alloc_skb_cb()

Apr 3, 2025

References

git.kernel.org / stable/c/1bd68db7beb426ab5a45d81516ed9611284affc8
git.kernel.org / stable/c/72d061ee630d0dbb45c2920d8d19b3861c413e54
Patch
git.kernel.org / stable/c/761b7c36addd22c7e6ceb05caaadc3b062d99faa
Patch
git.kernel.org / stable/c/76304cba8cba12bb10d89d016c28403a2dd89a29
git.kernel.org / stable/c/788ae2ae4cf484e248b5bc29211c7ac6510e3e92
Patch
git.kernel.org / stable/c/a78692ec0d1e17a96b09f2349a028878f5b305e4
Patch
git.kernel.org / stable/c/b3d607e36fef4bd05fb938a8a868ff70e9fedbe2
git.kernel.org / stable/c/ecd06ad0823a90b4420c377ef8917e44e23ee841
Patch
lists.debian.org / debian-lts-announce/2025/05/msg00030.html
lists.debian.org / debian-lts-announce/2025/05/msg00045.html