]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
Bluetooth: ISO: Fix possible UAF on iso_conn_free
authorLuiz Augusto von Dentz <luiz.von.dentz@intel.com>
Mon, 22 Sep 2025 20:27:51 +0000 (16:27 -0400)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 15 Oct 2025 09:56:37 +0000 (11:56 +0200)
commiteba6d787ec117a5d2c60f9644e0a39c18542b6be
tree18594d5e0323ad892753f08a9e8eb875e2029379
parent78e53e0d0c0a3ad4e68784dcf61055122d1b36f0
Bluetooth: ISO: Fix possible UAF on iso_conn_free

[ Upstream commit 9950f095d6c875dbe0c9ebfcf972ec88fdf26fc8 ]

This attempt to fix similar issue to sco_conn_free where if the
conn->sk is not set to NULL may lead to UAF on iso_conn_free.

Fixes: ccf74f2390d6 ("Bluetooth: Add BTPROTO_ISO socket type")
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/bluetooth/iso.c