Griffin Kroah-Hartman 951d6cb5ea Bluetooth: MGMT: Add error handling to pair_device() ...

commit 538fd3921a upstream.

hci_conn_params_add() never checks for a NULL value and could lead to a NULL
pointer dereference causing a crash.

Fixed by adding error handling in the function.

Cc: Stable <stable@kernel.org>
Fixes: 5157b8a503 ("Bluetooth: Fix initializing conn_params in scan phase")
Signed-off-by: Griffin Kroah-Hartman <griffin@kroah.com>
Reported-by: Yiwei Zhang <zhan4630@purdue.edu>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-09-04 13:23:35 +02:00

..

6lowpan

…

9p

net/9p: fix uninit-value in p9_client_rpc()

2024-06-16 13:39:58 +02:00

802

…

8021q

…

appletalk

…

atm

…

ax25

…

batman-adv

batman-adv: Don't accept TT entries for out-of-spec VIDs

2024-07-05 09:14:49 +02:00

bluetooth

Bluetooth: MGMT: Add error handling to pair_device()

2024-09-04 13:23:35 +02:00

bpf

bpf: Set run context for rawtp test_run callback

2024-07-05 09:14:06 +02:00

bpfilter

…

bridge

netfilter: nf_queue: drop packets with cloned unconfirmed conntracks

2024-09-04 13:23:19 +02:00

caif

…

can

net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new

2024-07-05 09:14:48 +02:00

ceph

libceph: fix race between delayed_work() and ceph_monc_stop()

2024-07-18 13:07:42 +02:00

core

net: linkwatch: use system_unbound_wq

2024-08-19 05:45:35 +02:00

dcb

…

dccp

Fix race for duplicate reqsk on identical SYN

2024-07-05 09:14:41 +02:00

dns_resolver

…

dsa

net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT

2024-06-16 13:39:54 +02:00

ethernet

ethernet: Add helper for assigning packet type when dest address does not match device address

2024-05-02 16:24:49 +02:00

ethtool

ethtool: netlink: do not return SQI value if link is down

2024-07-18 13:07:38 +02:00

hsr

…

ieee802154

net: drop nopreempt requirement on sock_prot_inuse_add()

2024-07-05 09:14:08 +02:00

ife

…

ipv4

netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().

2024-08-19 05:45:32 +02:00

ipv6

ipv6: prevent possible UAF in ip6_xmit()

2024-09-04 13:23:34 +02:00

iucv

s390/iucv: fix receive buffer virtual vs physical address confusion

2024-09-04 13:23:27 +02:00

kcm

kcm: Serialise kcm_sendmsg() for the same socket.

2024-09-04 13:23:32 +02:00

key

…

l2tp

l2tp: fix lockdep splat

2024-08-19 05:45:36 +02:00

l3mdev

…

lapb

…

llc

…

mac80211

wifi: mac80211: fix BA session teardown race

2024-09-04 13:23:20 +02:00

mac802154

net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()

2024-07-27 10:46:13 +02:00

mctp

…

mpls

…

mptcp

mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size

2024-09-04 13:23:19 +02:00

ncsi

net/ncsi: Fix the multi thread manner of NCSI driver

2024-07-05 09:14:06 +02:00

netfilter

netfilter: flowtable: validate vlan header

2024-09-04 13:23:34 +02:00

netlabel

…

netlink

netlink: hold nlk->cb_mutex longer in __netlink_dump_start()

2024-09-04 13:23:25 +02:00

netrom

netrom: Fix a memory leak in nr_heartbeat_expiry()

2024-07-05 09:14:29 +02:00

nfc

nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()

2024-06-16 13:39:48 +02:00

nsh

nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().

2024-05-17 11:50:48 +02:00

openvswitch

openvswitch: Set the skbuff pkt_type for proper pmtud support.

2024-06-16 13:39:47 +02:00

packet

af_packet: Handle outgoing VLAN packets without hardware offloading

2024-08-19 05:45:11 +02:00

phonet

phonet: fix rtm_phonet_notify() skb allocation

2024-05-17 11:50:58 +02:00

psample

…

qrtr

net: qrtr: ns: Fix module refcnt

2024-06-16 13:39:33 +02:00

rds

net/rds: fix possible cp null dereference

2024-04-10 16:19:37 +02:00

rfkill

…

rose

…

rxrpc

…

sched

netem: fix return value if duplicate enqueue fails

2024-09-04 13:23:34 +02:00

sctp

sctp: Fix null-ptr-deref in reuseport_add_sock().

2024-08-19 05:45:35 +02:00

smc

net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined

2024-08-19 05:44:56 +02:00

strparser

…

sunrpc

sunrpc: use the struct net as the svc proc private

2024-09-04 13:23:30 +02:00

switchdev

…

tipc

tipc: Return non-zero value from tipc_udp_addr2str() on error

2024-08-19 05:45:24 +02:00

tls

tls: fix race between tx work scheduling and socket close

2024-08-19 05:45:49 +02:00

unix

af_unix: Read with MSG_PEEK loops if the first unread byte is OOB

2024-07-05 09:14:19 +02:00

vmw_vsock

…

wireless

wifi: cfg80211: check wiphy mutex is held for wdev mutex

2024-09-04 13:23:20 +02:00

x25

…

xdp

net: drop nopreempt requirement on sock_prot_inuse_add()

2024-07-05 09:14:08 +02:00

xfrm

net: fix __dst_negative_advice() race

2024-06-16 13:39:59 +02:00

compat.c

…

devres.c

…

Kconfig

…

Makefile

…

socket.c

…

sysctl_net.c

…