From: Soenke Huster Date: Sun, 23 Jan 2022 05:57:09 +0000 (+0100) Subject: Bluetooth: msft: fix null pointer deref on msft_monitor_device_evt X-Git-Tag: v5.18-rc1~136^2~495^2~7 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5201d23cc8e57531e0b17e41c0ae10405ba6abd3;p=thirdparty%2Fkernel%2Flinux.git Bluetooth: msft: fix null pointer deref on msft_monitor_device_evt msft_find_handle_data returns NULL if it can't find the handle. Therefore, handle_data must be checked, otherwise a null pointer is dereferenced. Signed-off-by: Soenke Huster Signed-off-by: Marcel Holtmann --- diff --git a/net/bluetooth/msft.c b/net/bluetooth/msft.c index 4845408558636..9a3d77d3ca868 100644 --- a/net/bluetooth/msft.c +++ b/net/bluetooth/msft.c @@ -704,6 +704,8 @@ static void msft_monitor_device_evt(struct hci_dev *hdev, struct sk_buff *skb) ev->monitor_state, &ev->bdaddr); handle_data = msft_find_handle_data(hdev, ev->monitor_handle, false); + if (!handle_data) + return; switch (ev->addr_type) { case ADDR_LE_DEV_PUBLIC: