Skip to content

Commit 3c85f60

Browse files
committed
Merge: CVE-2024-36011: Bluetooth: HCI: Fix potential null-ptr-deref
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/5012 JIRA: https://issues.redhat.com/browse/RHEL-38466 CVE: CVE-2024-36011 ``` Bluetooth: HCI: Fix potential null-ptr-deref Fix potential null-ptr-deref in hci_le_big_sync_established_evt(). Fixes: f777d88 (Bluetooth: ISO: Notify user space about failed bis connections) Signed-off-by: Sungwoo Kim <iam@sung-woo.kim> Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com> (cherry picked from commit d270600) ``` Signed-off-by: CKI Backport Bot <cki-ci-bot+cki-gitlab-backport-bot@redhat.com> Approved-by: Bastien Nocera <bnocera@redhat.com> Approved-by: David Marlin <dmarlin@redhat.com> Approved-by: Tony Camuso <tcamuso@redhat.com> Approved-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> Merged-by: Rado Vrbovsky <rvrbovsk@redhat.com>
2 parents f3894cf + e63366b commit 3c85f60

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

net/bluetooth/hci_event.c

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6900,6 +6900,8 @@ static void hci_le_big_sync_established_evt(struct hci_dev *hdev, void *data,
69006900
u16 handle = le16_to_cpu(ev->bis[i]);
69016901

69026902
bis = hci_conn_hash_lookup_handle(hdev, handle);
6903+
if (!bis)
6904+
continue;
69036905

69046906
set_bit(HCI_CONN_BIG_SYNC_FAILED, &bis->flags);
69056907
hci_connect_cfm(bis, ev->status);

0 commit comments

Comments
 (0)