Hello:
This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>:
On Wed, 31 May 2023 01:39:56 -0400 you wrote:
> l2cap_sock_release(sk) frees sk. However, sk's children are still alive
> and point to the already free'd sk's address.
> To fix this, l2cap_sock_release(sk) also cleans sk's children.
>
> ==================================================================
> BUG: KASAN: use-after-free in l2cap_sock_ready_cb+0xb7/0x100 net/bluetooth/l2cap_sock.c:1650
> Read of size 8 at addr ffff888104617aa8 by task kworker/u3:0/276
>
> [...]
Here is the summary with links:
- [v2] Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
https://git.kernel.org/bluetooth/bluetooth-next/c/8f514cf70050
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
