[PATCH 6.1 0/1] Bluetooth: hci_sync: cancel cmd_timer if hci_open failed

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: [PATCH 6.1 0/1] Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
From: Fedor Pchelkin <pchelkin@xxxxxxxxx>
Date: Thu, 26 Jan 2023 16:36:12 +0300
Cc: Fedor Pchelkin <pchelkin@xxxxxxxxx>, Archie Pusaka <apusaka@xxxxxxxxxxxx>, Abhishek Pandit-Subedi <abhishekpandit@xxxxxxxxxx>, Marcel Holtmann <marcel@xxxxxxxxxxxx>, Johan Hedberg <johan.hedberg@xxxxxxxxx>, Luiz Augusto von Dentz <luiz.dentz@xxxxxxxxx>, "David S. Miller" <davem@xxxxxxxxxxxxx>, Jakub Kicinski <kuba@xxxxxxxxxx>, linux-bluetooth@xxxxxxxxxxxxxxx, netdev@xxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, Alexey Khoroshilov <khoroshilov@xxxxxxxxx>, lvc-project@xxxxxxxxxxxxxxxx

Syzkaller reports use-after-free in hci_cmd_timeout(). The bug was fixed
in the following patch and can be cleanly applied to 6.1 stable tree.

Due to some technical rearrangement, the fix for older stable branches
requires a different patch which I'll send you in another thread.

Follow-Ups:
- Re: [PATCH 6.1 0/1] Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
  - From: Sasha Levin
- [PATCH 6.1 1/1] Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
  - From: Fedor Pchelkin

Prev by Date: Re: [PATCH v2 2/5] dt-bindings: bluetooth: marvell: add max-speed property
Next by Date: [PATCH 6.1 1/1] Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
Previous by thread: [PATCH v2 0/5] Bluetooth: hci_mrvl: Add serdev support for 88W8997
Next by thread: [PATCH 6.1 1/1] Bluetooth: hci_sync: cancel cmd_timer if hci_open failed
Index(es):
- Date
- Thread

[Index of Archives] [Bluez Devel] [Linux Wireless Networking] [Linux Wireless Personal Area Networking] [Linux ATH6KL] [Linux USB Devel] [Linux Media Drivers] [Linux Audio Users] [Linux Kernel] [Linux SCSI] [Big List of Linux Books]

Powered by Linux