In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: revert use of devm_kzalloc in btusb This reverts commit 98921dbd00c4e ("Bluetooth: Use devm_kzalloc in btusb.c …
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: revert use of devm_kzalloc in btusb This reverts commit 98921dbd00c4e ("Bluetooth: Use devm_kzalloc in btusb.c file"). In btusb_probe(), we use devm_kzalloc() to allocate the btusb data. This ties the lifetime of all the btusb data to the binding of a driver to one interface, INTF. In a driver that binds to other interfaces, ISOC and DIAG, this is an accident waiting to happen. The issue is revealed in btu…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/1e54c19eaf84ba652c4e376571093e58e144b339 Patch
- https://git.kernel.org/stable/c/252714f1e8bdd542025b16321c790458014d6880 Patch
- https://git.kernel.org/stable/c/c0ecb3e4451fe94f4315e6d09c4046dfbc42090b Patch
- https://git.kernel.org/stable/c/cca0e9206e3bcc63cd3e72193e60149165d493cc Patch
- https://git.kernel.org/stable/c/fdf7c640fb8a44a59b0671143d8c2f738bc48003 Patch
- https://git.kernel.org/stable/c/fff9206b0907252a41eb12b7c1407b9347df18b1 Patch
Timeline
- nvd_ingest NVD