In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' Function 'hci_discovery_filter_clear()' frees 'uuids' arra…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' Function 'hci_discovery_filter_clear()' frees 'uuids' array and then sets it to NULL. There is a tiny chance of the following race: 'hci_cmd_sync_work()' 'update_passive_scan_sync()' 'hci_update_passive_scan_sync()' 'hci_discovery_filter_clear()' kfree(uuids); <-------------------------preempted--------------------------------> …
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/16852eccbdfaf41a666705e3f8be55cf2864c5ca Patch
- https://git.kernel.org/stable/c/2935e556850e9c94d7a00adf14d3cd7fe406ac03 Patch
- https://git.kernel.org/stable/c/7ce9bb0b95fc280e9212b8922590c492ca1d9c39 Patch
- https://git.kernel.org/stable/c/86f3dcd1f331cfd4fd7ec88906955134ec51afbe
- https://git.kernel.org/stable/c/a351ff6b8ecca4229afaa0d98042bead8de64799 Patch
- https://git.kernel.org/stable/c/f8069f34c4c976786ded97498012225af87435d7 Patch
Timeline
- nvd_ingest NVD