Re: [PATCH v2] Bluetooth: hci_sync: Fix accept list UAF during suspend

[email protected]
Newsgroups org.kernel.vger.linux-bluetooth,org.kernel.vger.linux-kernel,org.kernel.vger.stable
Message-ID <178586520913.3702995.13748671232397528991.git-patchwork-notify@kernel.org>
Hello:

This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <[email protected]>:

On Sat,  1 Aug 2026 15:05:24 +0800 you wrote:
> hci_update_event_filter_sync() walks hdev->accept_list while sending a
> synchronous HCI command for each remote-wakeup device.  The suspend path
> holds hdev->req_lock, but accept-list updates are serialized by hdev->lock.
> Consequently, remove_device() can free the current list entry during the
> controller wait.
> 
> The following interleaving causes the use-after-free:
> 
> [...]

Here is the summary with links:
  - [v2] Bluetooth: hci_sync: Fix accept list UAF during suspend
    https://git.kernel.org/bluetooth/bluetooth-next/c/8b715ab95872

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.