shinys000114/linux
1
0
Fork 0
mirror of https://github.com/hardkernel/linux.git synced 2026-04-02 11:13:02 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
8ea1ef83d002f7eb77288a1eabe46e9f9df94c49
linux/net
History
Anmol Karn 79259a593e Bluetooth: Fix null pointer dereference in hci_event_packet() 
[ Upstream commit 6dfccd13db ]

AMP_MGR is getting derefernced in hci_phy_link_complete_evt(), when called
from hci_event_packet() and there is a possibility, that hcon->amp_mgr may
not be found when accessing after initialization of hcon.

- net/bluetooth/hci_event.c:4945
The bug seems to get triggered in this line:

bredr_hcon = hcon->amp_mgr->l2cap_conn->hcon;

Fix it by adding a NULL check for the hcon->amp_mgr before checking the ev-status.

Fixes: d5e911928b ("Bluetooth: AMP: Process Physical Link Complete evt")
Reported-and-tested-by: syzbot+0bef568258653cff272f@syzkaller.appspotmail.com
Link: https://syzkaller.appspot.com/bug?extid=0bef568258653cff272f
Signed-off-by: Anmol Karn <anmol.karan123@gmail.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-05-16 09:56:52 +09:00
..
6lowpan
6lowpan: Off by one handling ->nexthdr
2023-05-15 16:44:57 +09:00
9p
net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
2023-05-16 09:44:54 +09:00
802
…
8021q
vlan: fix memory leak in vlan_dev_set_egress_priority
2023-05-15 16:32:51 +09:00
appletalk
appletalk: Set error code if register_snap_client failed
2023-05-15 16:15:40 +09:00
atm
atm: fix a memory leak of vcc->user_back
2023-05-16 09:16:14 +09:00
ax25
AX.25: Prevent integer overflows in connect and sendmsg
2023-05-16 08:39:01 +09:00
batman-adv
batman-adv: set .owner to THIS_MODULE
2023-05-16 09:50:10 +09:00
bluetooth
Bluetooth: Fix null pointer dereference in hci_event_packet()
2023-05-16 09:56:52 +09:00
bridge
net: bridge: vlan: fix error return code in __vlan_add()
2023-05-16 09:55:55 +09:00
caif
caif: reduce stack size with KASAN
2023-05-15 12:38:05 +09:00
can
can: purge socket error queue on sock destruct
2023-05-15 13:55:21 +09:00
ceph
libceph: clear con->out_msg on Policy::stateful_server faults
2023-05-16 09:45:38 +09:00
core
net: Have netpoll bring-up DSA management interface
2023-05-16 09:48:51 +09:00
dcb
net: dcb: For wild-card lookups, use priority -1, not 0
2023-05-15 08:14:38 +09:00
dccp
net: ipv6: add net argument to ip6_dst_lookup_flow
2023-05-15 17:27:11 +09:00
decnet
decnet: fix DN_IFREQ_SIZE
2023-05-15 16:07:59 +09:00
dns_resolver
KEYS: DNS: fix parsing multiple options
2023-05-12 16:29:40 +09:00
dsa
net: dsa: tag_brcm: Fix skb->fwd_offload_mark location
2023-05-15 17:13:02 +09:00
ethernet
net: add annotations on hh->hh_len lockless accesses
2023-05-15 16:31:00 +09:00
hsr
net/hsr: Check skb_put_padto() return value
2023-05-16 09:14:43 +09:00
ieee802154
nl802154: add missing attribute validation for dev_type
2023-05-15 17:09:03 +09:00
ipv4
tcp: fix cwnd-limited bug for TSO deferral where we send nothing
2023-05-16 09:55:52 +09:00
ipv6
ah6: fix error return code in ah6_input()
2023-05-16 09:48:41 +09:00
ipx
ipx: call ipxitf_put() in ioctl error path
2017-05-25 15:44:41 +02:00
irda
irda: Fix memory leak caused by repeated binds of irda socket
2023-05-12 17:27:16 +09:00
iucv
net/af_iucv: set correct sk_protocol for child sockets
2023-05-16 09:50:42 +09:00
kcm
kcm: switch order of device registration to fix a crash
2023-05-15 12:22:31 +09:00
key
af_key: pfkey_dump needs parameter validation
2023-05-16 09:14:25 +09:00
l2tp
l2tp: remove skb_dst_set() from l2tp_xmit_skb()
2023-05-16 08:30:03 +09:00
l3mdev
net: ipv6: Remove l3mdev_get_saddr6
2016-09-10 23:12:53 -07:00
lapb
lapb: fixed leak of control-blocks.
2023-05-15 13:49:35 +09:00
llc
llc: make sure applications use ARPHRD_ETHER
2023-05-16 08:30:04 +09:00
mac80211
mac80211: mesh: fix mesh_pathtbl_init() error path
2023-05-16 09:55:57 +09:00
mac802154
mac802154: tx: fix use-after-free
2023-05-16 09:16:58 +09:00
mpls
net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup
2023-05-15 17:27:12 +09:00
ncsi
net/ncsi: Improve HNCDSC AEN handler
2016-10-20 11:23:08 -04:00
netfilter
ipvs: Fix uninit-value in do_ip_vs_set_ctl()
2023-05-16 09:40:13 +09:00
netlabel
netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist()
2023-05-16 09:48:55 +09:00
netlink
genetlink: remove genl_bind
2023-05-16 08:30:10 +09:00
netrom
net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
2023-05-15 17:22:52 +09:00
nfc
nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download()
2023-05-16 09:37:23 +09:00
openvswitch
openvswitch: handle DNAT tuple collision
2023-05-16 09:24:18 +09:00
packet
net/packet: fix overflow in tpacket_rcv
2023-05-16 09:23:48 +09:00
phonet
phonet: fix building with clang
2023-05-15 12:05:35 +09:00
qrtr
net: qrtr: Fix passing invalid reference to qrtr_local_enqueue()
2023-05-15 17:29:46 +09:00
rds
rds: Prevent kernel-infoleak in rds_notify_queue_get()
2023-05-16 08:44:05 +09:00
rfkill
rfkill: Fix incorrect check to avoid NULL pointer dereference
2023-05-15 16:32:30 +09:00
rose
rose: Fix Null pointer dereference in rose_send_frame()
2023-05-16 09:50:43 +09:00
rxrpc
rxrpc: Fix server keyring leak
2023-05-16 09:24:31 +09:00
sched
net: sched: export __netdev_watchdog_up()
2023-05-16 08:20:45 +09:00
sctp
sctp: change to hold/put transport for proto_unreach_timer
2023-05-16 09:49:00 +09:00
strparser
strparser: Fix incorrect strp->need_bytes value.
2018-04-29 11:32:02 +02:00
sunrpc
SUNRPC: ECONNREFUSED should cause a rebind.
2023-05-16 09:44:12 +09:00
switchdev
switchdev: Execute bridge ndos only for bridge ports
2016-10-19 10:58:04 -04:00
tipc
tipc: fix use-after-free in tipc_bcast_get_mode
2023-05-16 09:45:59 +09:00
unix
skbuff: fix a data race in skb_queue_len()
2023-05-16 09:15:28 +09:00
vmw_vsock
vsock: use ns_capable_noaudit() on socket create
2023-05-16 09:46:14 +09:00
wimax
net:wimax: Fix doucble word "the the" in networking.xml
2015-08-09 22:43:52 -07:00
wireguard
WireGuard 1.0.20201221
2023-05-16 09:55:31 +09:00
wireless
cfg80211: regulatory: Fix inconsistent format argument
2023-05-16 09:47:22 +09:00
x25
net/x25: prevent a couple of overflows
2023-05-16 09:50:49 +09:00
xfrm
net: xfrm: fix a race condition during allocing spi
2023-05-16 09:46:55 +09:00
compat.c
net/compat: Add missing sock updates for SCM_RIGHTS
2023-05-16 08:47:54 +09:00
Kconfig
net/wireguard: add WireGuard 1.0.20200712
2023-05-15 17:31:52 +09:00
Makefile
net/wireguard: add WireGuard 1.0.20200712
2023-05-15 17:31:52 +09:00
socket.c
net: Set fput_needed iff FDPUT_FPUT is set
2023-05-16 08:47:15 +09:00
sysctl_net.c
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
2016-10-06 09:52:23 -07:00