Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists hci_cmd_sync_queue_once() needs to indicate whether a queue item was added, so caller can know if callbacks are called, so it can avoid leaking resources. Change the function to return -EEXIST if queue item already exists. Modify all callsites to handle that.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 1499f79995c7ee58e3bfeeff75f6d1b37dcda881 before dfee8da127bafa46530b72347bce3ccae736296d; affected 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 before 799e2e5fbf3f14874b5c6cc289a0dd68b2ca1979; affected 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 before 5cfa4f537a056c91ac6c09bc3ab58a4455217df7; affected 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 before 0ad2ce230b38cd4b3f6732cc609e270461e626e5; affected 505ea2b295929e7be2b4e1bc86ee31cb7862fb01 before 2969554bcfccb5c609f6b6cd4a014933f3a66dd0; affected f00f36db76eb8fd10d13e80e2590f23b5beaa54d; affected 357603f4d396d85fbf0045512efaf1d7f7394ed7; affected 6.6.51 before 6.6.160; affected 6.1.120 before 6.2; affected 6.8.9 before 6.9 |
| Linux / Linux | affected 6.9; unaffected 0 before 6.9; unaffected 6.6.160 through 6.6.*; unaffected 6.12.114 through 6.12.*; unaffected 6.18.57 through 6.18.*; unaffected 6.19.12 through 6.19.*; unaffected 7.0 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/dfee8da127bafa46530b72347bce3ccae736296d
- https://git.kernel.org/stable/c/799e2e5fbf3f14874b5c6cc289a0dd68b2ca1979
- https://git.kernel.org/stable/c/5cfa4f537a056c91ac6c09bc3ab58a4455217df7
- https://git.kernel.org/stable/c/0ad2ce230b38cd4b3f6732cc609e270461e626e5
- https://git.kernel.org/stable/c/2969554bcfccb5c609f6b6cd4a014933f3a66dd0