]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 51203eb) | patch
Bluetooth: use correct lock to prevent UAF of hdev object
authorLin Ma <linma@zju.edu.cn>
Sun, 30 May 2021 13:37:43 +0000 (21:37 +0800)
committerMarcel Holtmann <marcel@holtmann.org>
Mon, 31 May 2021 12:33:26 +0000 (14:33 +0200)
commitb741fee226fe1593e68143cae27be162368e3394
tree74dfc8160419cf67bc15caebd9617da5f4e2d090tree | snapshot
parent51203eb8d199552388d8731e84eed1d68e0b0bdbcommit | diff
Bluetooth: use correct lock to prevent UAF of hdev object

The hci_sock_dev_event() function will cleanup the hdev object for
sockets even if this object may still be in used within the
hci_sock_bound_ioctl() function, result in UAF vulnerability.

This patch replace the BH context lock to serialize these affairs
and prevent the race condition.

Signed-off-by: Lin Ma <linma@zju.edu.cn>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
net/bluetooth/hci_sock.c diff | blob | history
Linux Kernel Source Tree.