In the Linux kernel, the following vulnerability has been resolved: bluetooth/l2cap: sync sock recv cb and release The problem occurs between the system call to close the sock and hci_rx_work, wher…
High CVSS 8.8
Summary
In the Linux kernel, the following vulnerability has been resolved: bluetooth/l2cap: sync sock recv cb and release The problem occurs between the system call to close the sock and hci_rx_work, where the former releases the sock and the latter accesses it without lock protection. CPU0 CPU1 ---- ---- sock_close hci_rx_work l2cap_sock_release hci_acldata_packet l2cap_sock_kill …
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/3b732449b78183d17178db40be3a4401cf3cd629 Patch
- https://git.kernel.org/stable/c/605572e64cd9cebb05ed609d96cff05b50d18cdf Patch
- https://git.kernel.org/stable/c/89e856e124f9ae548572c56b1b70c2255705f8fe Patch
- https://git.kernel.org/stable/c/b803f30ea23e0968b6c8285c42adf0d862ab2bf6 Patch
- https://git.kernel.org/stable/c/3b732449b78183d17178db40be3a4401cf3cd629 Patch
- https://git.kernel.org/stable/c/605572e64cd9cebb05ed609d96cff05b50d18cdf Patch
- https://git.kernel.org/stable/c/89e856e124f9ae548572c56b1b70c2255705f8fe Patch
- https://git.kernel.org/stable/c/b803f30ea23e0968b6c8285c42adf0d862ab2bf6 Patch
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html
Timeline
- nvd_ingest NVD