APPLIED[All but OEM-5.14]: [SRU K,HWE-5.17,J,OEM-5.14,F,B 0/1] CVE-2022-3564

[Stefan Bader]

On 17.11.22 02:44, Thadeu Lima de Souza Cascardo wrote:
> [Impact]
> A race condition on Bluetooth L2CAP can lead to a use-after-free.
> 
> [Backport]
> The fix is in linux-next. It could be cherry-picked cleanly on all kernels,
> though git-am would not apply to focal and bionic, which required their own
> cherry-pick.
> 
> [Potential regression]
> Bluetooth devices might fail to connect.
> 
> Maxim Mikityanskiy (1):
>    Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
> 
>   net/bluetooth/l2cap_core.c | 48 ++++++++++++++++++++++++++++++++------
>   1 file changed, 41 insertions(+), 7 deletions(-)
> 

Applied to all but OEM-5.14. Thanks.

-Stefan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/kernel-team/attachments/20221121/362ac6a5/attachment.sig>