Luiz Augusto von Dentz 3e4697ffdf Bluetooth: L2CAP: Fix attempting to access uninitialized memory ...

commit b1a2cd50c0 upstream.

On l2cap_parse_conf_req the variable efs is only initialized if
remote_efs has been set.

CVE: CVE-2022-42895
CC: stable@vger.kernel.org
Reported-by: Tamás Koczka <poprdi@google.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Reviewed-by: Tedd Ho-Jeong An <tedd.an@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-11-10 18:15:36 +01:00

..

6lowpan

…

9p

…

802

…

8021q

…

appletalk

…

atm

net/atm: fix proc_mpc_write incorrect return value

2022-10-29 10:12:55 +02:00

ax25

…

batman-adv

…

bluetooth

Bluetooth: L2CAP: Fix attempting to access uninitialized memory

2022-11-10 18:15:36 +01:00

bpf

…

bpfilter

…

bridge

…

caif

…

can

can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb()

2022-11-03 23:59:10 +09:00

ceph

…

core

net, neigh: Fix null-ptr-deref in neigh_table_clear()

2022-11-10 18:15:31 +01:00

dcb

…

dccp

…

decnet

…

dns_resolver

…

dsa

net: dsa: fall back to default tagger if we can't load the one from DT

2022-11-10 18:15:27 +01:00

ethernet

…

ethtool

ethtool: eeprom: fix null-deref on genl_info in dump

2022-11-03 23:59:14 +09:00

hsr

net: hsr: avoid possible NULL deref in skb_clone()

2022-10-29 10:12:56 +02:00

ieee802154

net: ieee802154: fix error return code in dgram_bind()

2022-11-03 23:59:14 +09:00

ife

…

ipv4

nh: fix scope used to find saddr when adding non gw nh

2022-11-03 23:59:19 +09:00

ipv6

ipv6: fix WARNING in ip6_route_net_exit_late()

2022-11-10 18:15:31 +01:00

iucv

…

kcm

kcm: do not sense pfmemalloc status in kcm_sendpage()

2022-11-03 23:59:19 +09:00

key

…

l2tp

…

l3mdev

…

lapb

…

llc

…

mac80211

…

mac802154

mac802154: Fix LQI recording

2022-11-03 23:59:12 +09:00

mctp

…

mpls

…

mptcp

…

ncsi

…

netfilter

netfilter: ipset: enforce documented limit to prevent allocating huge memory

2022-11-10 18:15:30 +01:00

netlabel

…

netlink

…

netrom

…

nfc

…

nsh

…

openvswitch

openvswitch: switch from WARN to pr_warn

2022-11-03 23:59:18 +09:00

packet

…

phonet

…

psample

…

qrtr

…

rds

net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()

2022-10-26 12:34:49 +02:00

rfkill

…

rose

rose: Fix NULL pointer dereference in rose_send_frame()

2022-11-10 18:15:29 +01:00

rxrpc

…

sched

net: sched: Fix use after free in red_enqueue()

2022-11-10 18:15:28 +01:00

sctp

…

smc

net/smc: Fix possible leaked pernet namespace in smc_init()

2022-11-10 18:15:31 +01:00

strparser

…

sunrpc

SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed

2022-11-10 18:15:26 +01:00

switchdev

…

tipc

tipc: fix a null-ptr-deref in tipc_topsrv_accept

2022-11-03 23:59:15 +09:00

tls

…

unix

io_uring/af_unix: defer registered files gc to io_uring release

2022-10-26 12:35:52 +02:00

vmw_vsock

vsock: fix possible infinite sleep in vsock_connectible_wait_data()

2022-11-10 18:15:31 +01:00

wireless

…

x25

…

xdp

…

xfrm

xfrm: Update ipcomp_scratches with NULL when freed

2022-10-26 12:35:34 +02:00

compat.c

…

devres.c

…

Kconfig

…

Makefile

…

socket.c

…

sysctl_net.c

…