iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers/bluetooth
History
Zheng Wang a18fb433ce Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work 
[ Upstream commit 1e9ac114c4428fdb7ff4635b45d4f46017e8916f ]

In btsdio_probe, &data->work was bound with btsdio_work.In
btsdio_send_frame, it was started by schedule_work.

If we call btsdio_remove with an unfinished job, there may
be a race condition and cause UAF bug on hdev.

Fixes: ddbaf13e3609 ("[Bluetooth] Add generic driver for Bluetooth SDIO devices")
Signed-off-by: Zheng Wang <zyytlz.wz@163.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-04-05 11:16:38 +02:00
..
ath3k.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
bcm203x.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
bfusb.c
Bluetooth: bfusb: fix division by zero in send path
2022-01-16 09:15:38 +01:00
bluecard_cs.c
…
bpa10x.c
Bluetooth: bpa10x: change return value
2019-09-04 16:11:46 +02:00
bt3c_cs.c
…
btbcm.c
Bluetooth: btbcm: Add 2 missing models to subver tables
2020-06-22 09:30:59 +02:00
btbcm.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
btintel.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
btintel.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
btmrvl_debugfs.c
…
btmrvl_drv.h
Bluetooth: btmrvl: Drop unused GPIO includes
2019-01-22 09:51:20 +01:00
btmrvl_main.c
…
btmrvl_sdio.c
btmrvl: Fix firmware filename for sd8997 chipset
2020-08-19 08:16:06 +02:00
btmrvl_sdio.h
…
btmtksdio.c
Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt
2022-04-15 14:18:16 +02:00
btmtkuart.c
Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync
2021-11-17 09:48:34 +01:00
btqca.c
Bluetooth: hci_qca: wait for Pre shutdown complete event before sending the Power off pulse
2019-09-05 17:27:22 +02:00
btqca.h
Bluetooth: hci_qca: Send VS pre shutdown command.
2019-08-12 18:23:50 +02:00
btqcomsmd.c
Bluetooth: btqcomsmd: Fix command timeout after setting BD address
2023-04-05 11:16:38 +02:00
btrsi.c
…
btrtl.c
Bluetooth: btrtl: Use kvmalloc for FW allocations
2020-10-01 13:17:29 +02:00
btrtl.h
Bluetooth: btrtl: HCI reset on close for Realtek BT chip
2019-07-06 12:32:50 +02:00
btsdio.c
Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work
2023-04-05 11:16:38 +02:00
btusb.c
Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave()
2023-01-18 11:41:16 +01:00
btwilink.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 333
2019-06-05 17:37:06 +02:00
dtl1_cs.c
…
h4_recv.h
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
hci_ag6xx.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
hci_ath.c
Bluetooth: hci_uart: check for missing tty operations
2019-07-31 13:17:33 -07:00
hci_bcm.c
Bluetooth: hci_bcm: Check for error irq
2022-01-27 09:19:36 +01:00
hci_bcsp.c
Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave()
2023-01-18 11:41:16 +01:00
hci_h4.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
hci_h5.c
Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave()
2023-01-18 11:41:16 +01:00
hci_intel.c
Bluetooth: hci_intel: Add check for platform_driver_register
2022-08-25 11:17:47 +02:00
hci_ldisc.c
Bluetooth: hci_uart: Fix a race for write_work scheduling
2021-03-04 10:26:11 +01:00
hci_ll.c
Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave()
2023-01-18 11:41:16 +01:00
hci_mrvl.c
Bluetooth: hci_uart: check for missing tty operations
2019-07-31 13:17:33 -07:00
hci_nokia.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
hci_qca.c
Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave()
2023-01-18 11:41:16 +01:00
hci_serdev.c
Bluetooth: hci_serdev: call init_rwsem() before p->open()
2022-04-15 14:18:10 +02:00
hci_uart.h
Bluetooth: hci_uart: check for missing tty operations
2019-07-31 13:17:33 -07:00
hci_vhci.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156
2019-05-30 11:26:35 -07:00
Kconfig
Bluetooth: btusb: Add protocol support for MediaTek MT7668U USB devices
2019-07-06 21:44:25 +02:00
Makefile
Bluetooth: mediatek: add support for MediaTek MT7663S and MT7668S SDIO devices
2019-04-23 18:09:07 +02:00