Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync

...

Linux Heap Buffer Overflow DoS

The vulnerability in the hcienhancedsetupsync function within the net/bluetooth/hciconn.c module of the Linux kernel is related to the reuse of previously freed memory. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of...

AZL-51443 CVE-2024-50029 affecting package kernel for versions less than 6.6.57.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciconn: Fix UAF in hcienhancedsetupsync This checks if the ACL connection remains valid as it could be destroyed while hcienhancedsetupsync is pending on cmdsync leading to the following trace: BUG: KASAN:...

PT-2024-7604

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description The issue is related to a use-after-free vulnerability in the hci enhanced setup sync function in the Linux kernel's Bluetooth module. This vulnerability can be exploited to impact the...