Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} Similar to commit d0be8347c623 ("Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put"), just use l2cap_chan_hold_unless_zero to prevent referencing a channel that is about to be destroyed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before f2d38e77aa5f3effc143e7dd24da8acf02925958; affected 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before 1351551aa9058e07a20a27a158270cf84fcde621; affected 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before c02421992505c95c7f3c9ad59ee35e22eac60988; affected 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before d9ba36c22a7bb09d6bac4cc2f243eff05da53f43; affected 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before ac6725a634f7e8c0330610a8527f20c730b61115; affected 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before 348d446762e7c70778df8bafbdf3fa0df2123f58; affected 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284; affected 61d6ef3e3408cdf7e622646fb90a9f7f9560b943 before a2a9339e1c9deb7e1e079e12e27a0265aea8421a |
| Linux / Linux | affected 3.5; unaffected 0 before 3.5; unaffected 4.14.313 through 4.14.*; unaffected 4.19.281 through 4.19.*; unaffected 5.4.241 through 5.4.*; unaffected 5.10.178 through 5.10.*; unaffected 5.15.108 through 5.15.*; unaffected 6.1.25 through 6.1.*; unaffected 6.2.12 through 6.2.*; unaffected 6.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/f2d38e77aa5f3effc143e7dd24da8acf02925958
- https://git.kernel.org/stable/c/1351551aa9058e07a20a27a158270cf84fcde621
- https://git.kernel.org/stable/c/c02421992505c95c7f3c9ad59ee35e22eac60988
- https://git.kernel.org/stable/c/d9ba36c22a7bb09d6bac4cc2f243eff05da53f43
- https://git.kernel.org/stable/c/ac6725a634f7e8c0330610a8527f20c730b61115
- https://git.kernel.org/stable/c/348d446762e7c70778df8bafbdf3fa0df2123f58
- https://git.kernel.org/stable/c/d82a439c3cfdb28aa7e82e2e849c5c4dd9fca284
- https://git.kernel.org/stable/c/a2a9339e1c9deb7e1e079e12e27a0265aea8421a
ADP enrichment
No English description supplied.
No references supplied.