Luiz Augusto von Dentz 2a7e918e22 Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk ...

commit c5d2b6fa26 upstream.

Similar to commit 0f7d9b31ce ("netfilter: nf_tables: fix use-after-free
in nft_set_catchall_destroy()"). We can not access k after kfree_rcu()
call.

Cc: stable@vger.kernel.org
Signed-off-by: Min Li <lm0963hack@gmail.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-06-14 11:13:06 +02:00

..

bnep

Bluetooth: bnep: Use the correct print format

2021-06-26 07:12:40 +02:00

cmtp

Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails

2022-01-27 11:03:03 +01:00

hidp

Bluetooth: Fix race condition in hidp_session_thread

2023-04-20 12:13:52 +02:00

rfcomm

Bluetooth: Fix possible deadlock in rfcomm_sk_state_change

2023-02-01 08:27:11 +01:00

6lowpan.c

Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()

2022-12-14 11:37:24 +01:00

a2mp.c

Bluetooth: a2mp: Use the correct print format

2021-06-26 07:12:41 +02:00

a2mp.h

Bluetooth: Replace zero-length array with flexible-array member

2020-02-28 08:30:02 +01:00

af_bluetooth.c

Bluetooth: Fix not cleanup led when bt_init fails

2022-12-14 11:37:24 +01:00

amp.c

Bluetooth: amp: Use the correct print format

2021-06-26 07:12:41 +02:00

amp.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 284

2019-06-05 17:36:37 +02:00

aosp.c

Bluetooth: Add support for reading AOSP vendor capabilities

2021-04-06 14:11:23 -07:00

aosp.h

Bluetooth: Add support for reading AOSP vendor capabilities

2021-04-06 14:11:23 -07:00

ecdh_helper.c

crypto: ecdh - move curve_id of ECDH from the key to algorithm name

2021-03-13 00:04:03 +11:00

ecdh_helper.h

Fix misc new gcc warnings

2021-04-27 17:05:53 -07:00

hci_conn.c

Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed

2022-04-08 14:23:41 +02:00

hci_core.c

Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk

2023-06-14 11:13:06 +02:00

hci_debugfs.c

Bluetooth: use inclusive language when filtering devices

2021-06-26 07:12:44 +02:00

hci_debugfs.h

Bluetooth: Provide option to enable/disable debugfs information

2015-02-15 18:54:13 +02:00

hci_event.c

Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt

2023-02-06 07:59:01 +01:00

hci_request.c

Bluetooth: use hdev lock in activate_scan for hci_is_adv_monitoring

2022-06-09 10:22:58 +02:00

hci_request.h

Bluetooth: Resume advertising after LE connection

2020-11-09 13:33:19 +01:00

hci_sock.c

bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()

2023-06-05 09:21:24 +02:00

hci_sysfs.c

Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times

2022-10-26 12:35:36 +02:00

Kconfig

Bluetooth: Add support for reading AOSP vendor capabilities

2021-04-06 14:11:23 -07:00

l2cap_core.c

Bluetooth: L2CAP: Add missing checks for invalid DCID

2023-06-14 11:13:02 +02:00

l2cap_sock.c

Bluetooth: L2CAP: Fix potential user-after-free

2023-03-10 09:39:15 +01:00

leds.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

leds.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

lib.c

Bluetooth: Introduce debug feature when dynamic debug is disabled

2020-05-11 12:16:27 +02:00

Makefile

Bluetooth: Add support for reading AOSP vendor capabilities

2021-04-06 14:11:23 -07:00

mgmt_config.c

Bluetooth: mgmt: Use the correct print format

2021-06-26 07:12:42 +02:00

mgmt_config.h

Bluetooth: mgmt: Add commands for runtime configuration

2020-06-18 13:11:03 +03:00

mgmt_util.c

networking: make skb_push & __skb_push return void pointers

2017-06-16 11:48:40 -04:00

mgmt_util.h

Bluetooth: Add generic mgmt helper API

2015-03-17 18:03:08 +01:00

mgmt.c

Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS

2022-12-31 13:14:20 +01:00

msft.c

Bluetooth: msft: Use the correct print format

2021-06-26 07:12:42 +02:00

msft.h

Bluetooth: Allow Microsoft extension to indicate curve validation

2021-04-08 12:26:34 +02:00

sco.c

Bluetooth: SCO: Fix sco_send_frame returning skb->len

2022-07-29 17:25:30 +02:00

selftest.c

crypto: ecdh - move curve_id of ECDH from the key to algorithm name

2021-03-13 00:04:03 +11:00

selftest.h

Bluetooth: Add support for self testing framework

2014-12-30 08:53:55 +02:00

smp.c

Bluetooth: use inclusive language in HCI role comments

2021-06-26 07:12:43 +02:00

smp.h

Bluetooth: use inclusive language in SMP

2021-06-26 07:12:37 +02:00