]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails
authorLuiz Augusto von Dentz <luiz.von.dentz@intel.com>
Wed, 19 May 2021 20:41:50 +0000 (13:41 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 19 Jul 2021 08:01:10 +0000 (10:01 +0200)
commita1b0c1b3ef009804ee62d97f6484b53c290bd117
treec1fd073b0064a4cf59a9b147554e29328ffdf748
parente96000e36515d6297231ccc587765b570bb5b5fb
Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails

[ Upstream commit 1fa20d7d4aad02206e84b74915819fbe9f81dab3 ]

The use of l2cap_chan_del is not safe under a loop using
list_for_each_entry.

Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/bluetooth/l2cap_core.c