diff options
| author | Pauli Virtanen <pav@iki.fi> | 2026-03-29 16:43:01 +0300 |
|---|---|---|
| committer | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2026-04-01 16:46:33 -0400 |
| commit | a2639a7f0f5bf7d73f337f8f077c19415c62ed2c (patch) | |
| tree | 439d38aa3fb534bb935ae510b8d906d20fe0b70f /arch/ppc/git@git.tavy.me:linux.git | |
| parent | b8dbe9648d69059cfe3a28917bfbf7e61efd7f15 (diff) | |
Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
hci_conn lookup and field access must be covered by hdev lock in
set_cig_params_sync, otherwise it's possible it is freed concurrently.
Take hdev lock to prevent hci_conn from being deleted or modified
concurrently. Just RCU lock is not suitable here, as we also want to
avoid "tearing" in the configuration.
Fixes: a091289218202 ("Bluetooth: hci_conn: Fix hci_le_set_cig_params")
Signed-off-by: Pauli Virtanen <pav@iki.fi>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Diffstat (limited to 'arch/ppc/git@git.tavy.me:linux.git')
0 files changed, 0 insertions, 0 deletions