ACK: [SRU][F/J/L][PATCH 0/1] CVE-2023-31083

Tim Gardner tim.gardner at canonical.com
Wed Sep 13 16:47:15 UTC 2023


On 9/12/23 4:02 PM, Yuxuan Luo wrote:
> [Impact]
> An issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux
> kernel 6.2. In hci_uart_tty_ioctl, there is a race condition between
> HCIUARTSETPROTO and HCIUARTGETPROTO. HCI_UART_PROTO_SET is set before
> hu->proto is set. A NULL pointer dereference may occur.
> 
> [Backport]
> It is a clean cherry pick.
> 
> [Test]
> Smoked tested via calling the `hcitool` command.
> 
> [Potential Regression]
> Expect very low regression potential.
> 
> Lee, Chun-Yi (1):
>    Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in
>      HCIUARTGETPROTO
> 
>   drivers/bluetooth/hci_ldisc.c | 3 ++-
>   1 file changed, 2 insertions(+), 1 deletion(-)
> 
Acked-by: Tim Gardner <tim.gardner at canonical.com>
-- 
-----------
Tim Gardner
Canonical, Inc




More information about the kernel-team mailing list