Luiz Augusto von Dentz 2270e32bd1 Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk ...

commit c5d2b6fa26 upstream.

Similar to commit 0f7d9b31ce ("netfilter: nf_tables: fix use-after-free
in nft_set_catchall_destroy()"). We can not access k after kfree_rcu()
call.

Cc: stable@vger.kernel.org
Signed-off-by: Min Li <lm0963hack@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-06-14 11:09:52 +02:00

..

bnep

…

cmtp

…

hidp

Bluetooth: Fix race condition in hidp_session_thread

2023-04-20 12:10:25 +02:00

rfcomm

Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave()

2023-01-14 10:15:45 +01:00

6lowpan.c

Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()

2022-12-14 11:32:01 +01:00

a2mp.c

…

a2mp.h

…

af_bluetooth.c

Bluetooth: Fix not cleanup led when bt_init fails

2022-12-14 11:32:01 +01:00

amp.c

…

amp.h

…

ecdh_helper.c

…

ecdh_helper.h

…

hci_conn.c

Bluetooth: use inclusive language in HCI role comments

2022-06-09 10:21:09 +02:00

hci_core.c

Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk

2023-06-14 11:09:52 +02:00

hci_debugfs.c

Bluetooth: use inclusive language when filtering devices

2022-06-09 10:21:09 +02:00

hci_debugfs.h

…

hci_event.c

Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt

2023-02-06 07:56:16 +01:00

hci_request.c

Bluetooth: use inclusive language when filtering devices

2022-06-09 10:21:09 +02:00

hci_request.h

…

hci_sock.c

bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()

2023-06-05 09:07:04 +02:00

hci_sysfs.c

Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times

2022-10-26 13:25:46 +02:00

Kconfig

…

l2cap_core.c

Bluetooth: L2CAP: Add missing checks for invalid DCID

2023-06-14 11:09:40 +02:00

l2cap_sock.c

Bluetooth: L2CAP: Fix potential user-after-free

2023-03-11 16:39:26 +01:00

leds.c

…

leds.h

…

lib.c

…

Makefile

…

mgmt_config.c

Bluetooth: Interleave with allowlist scan

2022-06-09 10:21:08 +02:00

mgmt_config.h

…

mgmt_util.c

…

mgmt_util.h

…

mgmt.c

Bluetooth: use inclusive language when filtering devices

2022-06-09 10:21:09 +02:00

msft.c

…

msft.h

…

sco.c

Bluetooth: SCO: Fix sco_send_frame returning skb->len

2022-07-29 17:19:26 +02:00

selftest.c

…

selftest.h

…

smp.c

Bluetooth: use inclusive language in HCI role comments

2022-06-09 10:21:09 +02:00

smp.h

…