In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() Extend a critical section to prevent chan from early freeing. Also m…
Medium CVSS 6.8
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() Extend a critical section to prevent chan from early freeing. Also make the l2cap_connect() return type void. Nothing is using the returned value but it is ugly to return a potentially freed pointer. Making it void will help with backports because earlier kernels did use the return value. Now the compile will break for kernels where this patch is not a complete fix.…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/4d7b41c0e43995b0e992b9f8903109275744b658 Patch
- https://git.kernel.org/stable/c/826af9d2f69567c646ff46d10393d47e30ad23c6 Patch
- https://git.kernel.org/stable/c/8629a65a48890769c47ebc9b6e57c02a80a8975e
- https://git.kernel.org/stable/c/cfe560c7050bfb37b0d2491bbe7cd8b59e77fdc5 Patch
- http://www.openwall.com/lists/oss-security/2024/05/30/1 Issue Tracking
- http://www.openwall.com/lists/oss-security/2024/05/30/2 Issue Tracking
- https://git.kernel.org/stable/c/4d7b41c0e43995b0e992b9f8903109275744b658 Patch
- https://git.kernel.org/stable/c/826af9d2f69567c646ff46d10393d47e30ad23c6 Patch
- https://git.kernel.org/stable/c/cfe560c7050bfb37b0d2491bbe7cd8b59e77fdc5 Patch
Timeline
- nvd_ingest NVD