Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_connect_ind Accessing iso_pi(sk)->conn requires lock_sock, which is not taken in the "ev3" part of iso_connect_ind. It may also be NULL if socket has transitioned away from the LISTEN/CONNECT states before locking. Fix by adding lock/release. Recheck hcon is valid after lock acquire where needed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb before 0e830354c120954ccb9ca15880245912722c4031; affected 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb before e8e9cff6d80eeec28dec4cf7cc18662986945391; affected 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb before 9bee7e476534f27e830658dad962d85da9edf6bf; affected 168d9bf9c7f01df71e6404cfff66d9c2a8e968fb before 4311fd6f429065a8ba208660360a895627a00cf3; affected 489efc9ae36f164423f5fa7ace772a7ab8131cd8; affected 6.8.9 before 6.9 |
| Linux / Linux | affected 6.9; unaffected 0 before 6.9; unaffected 6.12.114 through 6.12.*; unaffected 6.18.44 through 6.18.*; unaffected 7.1.8 through 7.1.*; unaffected 7.2 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/0e830354c120954ccb9ca15880245912722c4031
- https://git.kernel.org/stable/c/e8e9cff6d80eeec28dec4cf7cc18662986945391
- https://git.kernel.org/stable/c/9bee7e476534f27e830658dad962d85da9edf6bf
- https://git.kernel.org/stable/c/4311fd6f429065a8ba208660360a895627a00cf3
ADP enrichment
No English description supplied.
No references supplied.