Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on marvell probe failure Make sure to stop any TX URBs submitted during Marvell OOB wakeup configuration on later probe failures to avoid use-after-free in the completion callback. This issue was reported by Sashiko while reviewing a fix for a wakeup source leak in the btusb probe errors paths.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
a4ccc9e33d2f01532bcceb621ea06bbf4db6efac to < 1edd524de5cc8143ece9c42c466346983dc5b5edaffecteda4ccc9e33d2f01532bcceb621ea06bbf4db6efac to < 0ccb1cb0a464dab78284c34196cd3e8e18bab4c4affecteda4ccc9e33d2f01532bcceb621ea06bbf4db6efac to < 631de465aba7f8ae46478bf5f598111412e8eff8affecteda4ccc9e33d2f01532bcceb621ea06bbf4db6efac to < 6e1b10df890f4663cb38af9fc1c93d36747b75afaffecteda4ccc9e33d2f01532bcceb621ea06bbf4db6efac to < 92c736866244340497a8a65afe2ac25354c2bf5eaffecteda4ccc9e33d2f01532bcceb621ea06bbf4db6efac to < a7e941a395711791c7e98d9870c6562c2c9e9ef2affecteda4ccc9e33d2f01532bcceb621ea06bbf4db6efac to < 838c917a2f16eefe68def800ebf48a2af591149aaffecteda4ccc9e33d2f01532bcceb621ea06bbf4db6efac to < c5b600a3c05b1a7a110d558df935a8fc8a471c79affected
Linux Linux
Default version status: affected
4.11affected0 to < 4.11unaffected5.10.261 to ≤ 5.10.*unaffected5.15.212 to ≤ 5.15.*unaffected6.1.178 to ≤ 6.1.*unaffected6.6.145 to ≤ 6.6.*unaffected6.12.96 to ≤ 6.12.*unaffected6.18.39 to ≤ 6.18.*unaffected7.1.4 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/1edd524de5cc8143ece9c42c466346983dc5b5ed ↗
- https://git.kernel.org/stable/c/0ccb1cb0a464dab78284c34196cd3e8e18bab4c4 ↗
- https://git.kernel.org/stable/c/631de465aba7f8ae46478bf5f598111412e8eff8 ↗
- https://git.kernel.org/stable/c/6e1b10df890f4663cb38af9fc1c93d36747b75af ↗
- https://git.kernel.org/stable/c/92c736866244340497a8a65afe2ac25354c2bf5e ↗
- https://git.kernel.org/stable/c/a7e941a395711791c7e98d9870c6562c2c9e9ef2 ↗
- https://git.kernel.org/stable/c/838c917a2f16eefe68def800ebf48a2af591149a ↗
- https://git.kernel.org/stable/c/c5b600a3c05b1a7a110d558df935a8fc8a471c79 ↗