Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt hci_conn lookup and field access must be covered by hdev lock in hci_le_remote_conn_param_req_evt, otherwise it's possible it is freed concurrently. Extend the hci_dev_lock critical section to cover all conn usage.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
95118dd4edfec950898a00180c6f998df0a6406d to < 59eecf0ffde15670e6a5e10c47be67f73d843b20affected95118dd4edfec950898a00180c6f998df0a6406d to < 5fb69e1eeea9d6cba80517e9f058b56b34bc3a81affected95118dd4edfec950898a00180c6f998df0a6406d to < 7cadb03be37e761130edb153544fe0770a842b19affected95118dd4edfec950898a00180c6f998df0a6406d to < 1d0bdbfe3e91c11f0a704c52443a9446a10d699caffected95118dd4edfec950898a00180c6f998df0a6406d to < ea3cd36d7382d5f8309df04c275d20df139ed42caffected95118dd4edfec950898a00180c6f998df0a6406d to < b255531b27da336571411248c2a72a350662bd09affected
Linux Linux
Default version status: affected
5.17affected0 to < 5.17unaffected6.1.168 to ≤ 6.1.*unaffected6.6.134 to ≤ 6.6.*unaffected6.12.81 to ≤ 6.12.*unaffected6.18.22 to ≤ 6.18.*unaffected6.19.12 to ≤ 6.19.*unaffected7.0 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/59eecf0ffde15670e6a5e10c47be67f73d843b20 ↗
- https://git.kernel.org/stable/c/5fb69e1eeea9d6cba80517e9f058b56b34bc3a81 ↗
- https://git.kernel.org/stable/c/7cadb03be37e761130edb153544fe0770a842b19 ↗
- https://git.kernel.org/stable/c/1d0bdbfe3e91c11f0a704c52443a9446a10d699c ↗
- https://git.kernel.org/stable/c/ea3cd36d7382d5f8309df04c275d20df139ed42c ↗
- https://git.kernel.org/stable/c/b255531b27da336571411248c2a72a350662bd09 ↗