Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix UAF on iso_sock_timeout conn->sk maybe have been unlinked/freed while waiting for iso_conn_lock so this checks if the conn->sk is still valid by checking if it part of iso_sk_list.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
ccf74f2390d60a2f9a75ef496d2564abb478f46a to < 876ac72d535fa94f4ac57bba651987c6f990f646affectedccf74f2390d60a2f9a75ef496d2564abb478f46a to < 14bcb721d241e62fdd18f6f434a2ed2ab6e71a9baffectedccf74f2390d60a2f9a75ef496d2564abb478f46a to < d75aad1d3143ca68cda52ff80ac392e1bbd84325affectedccf74f2390d60a2f9a75ef496d2564abb478f46a to < 246b435ad668596aa0e2bbb9d491b6413861211aaffected
Linux Linux
Default version status: affected
6.0affected0 to < 6.0unaffected6.1.115 to ≤ 6.1.*unaffected6.6.59 to ≤ 6.6.*unaffected6.11.6 to ≤ 6.11.*unaffected6.12 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/876ac72d535fa94f4ac57bba651987c6f990f646 ↗
- https://git.kernel.org/stable/c/14bcb721d241e62fdd18f6f434a2ed2ab6e71a9b ↗
- https://git.kernel.org/stable/c/d75aad1d3143ca68cda52ff80ac392e1bbd84325 ↗
- https://git.kernel.org/stable/c/246b435ad668596aa0e2bbb9d491b6413861211a ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗