On Mon, Jun 23, 2014 at 05:42:44PM +0200, Loic Poulain wrote: > When detecting a non-link packet, h5_reset_rx() frees the Rx skb. > Not returning after that will cause the upcoming h5_rx_payload() > call to dereference a now NULL Rx skb and trigger a kernel oops. > > Signed-off-by: Loic Poulain <loic.poulain@xxxxxxxxx> > --- > v2: commit message update (pointer deref) > > drivers/bluetooth/hci_h5.c | 1 + > 1 file changed, 1 insertion(+) <formletter> This is not the correct way to submit patches for inclusion in the stable kernel tree. Please read Documentation/stable_kernel_rules.txt for how to do this properly. </formletter> -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html