Re: [PATCH 6.1.y] Bluetooth: hci_conn: fix potential UAF in create_big_sync
Sasha Levin <[email protected]>
| Newsgroups | org.kernel.vger.stable |
|---|---|
| Message-ID | <[email protected]> |
On Thu, Aug 06, 2026 at 10:14:04PM +0000, Todd Kjos wrote: > [ Upstream commit 0beddb0c380bed5f5b8e61ddbe14635bb73d0b41 ] > > Add hci_conn_valid() check in create_big_sync() to detect stale > connections before proceeding with BIG creation. Handle the > resulting -ECANCELED in create_big_complete() and re-validate the > connection under hci_dev_lock() before dereferencing, matching the > pattern used by create_le_conn_complete() and create_pa_complete(). Queued for 6.1, thanks. -- Thanks, Sasha