Linux Kernel Bluetooth NULL Pointer Dereference Vulnerability in btrtl Component

A vulnerability in the Linux kernel's Bluetooth btrtl component can lead to a NULL pointer dereference. The issue arises in the btrtl_initialize() function, where the rtl_load_file() function's error handling is inadequate. If rtl_load_file() loads a file of zero length, the error code is not properly set, creating a situation where an error pointer is passed instead of NULL. This flaw, detected by the static analysis tool Smatch, can result in a NULL pointer dereference, potentially causing a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a NULL pointer dereference, leading to a denial-of-service condition.