]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6a137ca) | patch
Bluetooth: use correct lock to prevent UAF of hdev object
authorLin Ma <linma@zju.edu.cn>
Sun, 30 May 2021 13:37:43 +0000 (21:37 +0800)
committerMarcel Holtmann <marcel@holtmann.org>
Mon, 31 May 2021 12:33:26 +0000 (14:33 +0200)
commite305509e678b3a4af2b3cfd410f409f7cdaabb52
tree74dfc8160419cf67bc15caebd9617da5f4e2d090tree | snapshot
parent6a137caec23aeb9e036cdfd8a46dd8a366460e5dcommit | diff
Bluetooth: use correct lock to prevent UAF of hdev object

The hci_sock_dev_event() function will cleanup the hdev object for
sockets even if this object may still be in used within the
hci_sock_bound_ioctl() function, result in UAF vulnerability.

This patch replace the BH context lock to serialize these affairs
and prevent the race condition.

Signed-off-by: Lin Ma <linma@zju.edu.cn>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
net/bluetooth/hci_sock.c diff | blob | history
Linux Kernel Source Tree.