In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: fix slab-use-after-free in msft_do_close() Tying the msft->data lifetime to hdev by freeing it in hci_release_de…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: fix slab-use-after-free in msft_do_close() Tying the msft->data lifetime to hdev by freeing it in hci_release_dev() to fix the following case: [use] msft_do_close() msft = hdev->msft_data; if (!msft) ...(1) <- passed. return; mutex_lock(&msft->filter_lock); ...(4) <- used after freed. [free] msft_unregister() msft = hdev->msft_data; hdev->msft_data = NULL; ...(2) …
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/10f9f426ac6e752c8d87bf4346930ba347aaabac Patch
- https://git.kernel.org/stable/c/4f1de02de07748da80a8178879bc7a1df37fdf56 Patch
- https://git.kernel.org/stable/c/a85a60e62355e3bf4802dead7938966824b23940 Patch
- https://git.kernel.org/stable/c/e3880b531b68f98d3941d83f2f6dd11cf4fd6b76 Patch
- https://git.kernel.org/stable/c/10f9f426ac6e752c8d87bf4346930ba347aaabac Patch
- https://git.kernel.org/stable/c/4f1de02de07748da80a8178879bc7a1df37fdf56 Patch
- https://git.kernel.org/stable/c/a85a60e62355e3bf4802dead7938966824b23940 Patch
- https://git.kernel.org/stable/c/e3880b531b68f98d3941d83f2f6dd11cf4fd6b76 Patch
Timeline
- nvd_ingest NVD