In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix error code in chan_alloc_skb_cb() The chan_alloc_skb_cb() function is supposed to return error pointers on error. Returning NULL will lead to a NULL dereference. CREATE(Triage):(User=admin) CVE-2025-22007 (https://nvd.nist.gov/vuln/detail/CVE-2025-22007)