Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Zheng Wang a18fb433ce Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work ... [ Upstream commit 1e9ac114c4428fdb7ff4635b45d4f46017e8916f ] In btsdio_probe, &data->work was bound with btsdio_work.In btsdio_send_frame, it was started by schedule_work. If we call btsdio_remove with an unfinished job, there may be a race condition and cause UAF bug on hdev. Fixes: ddbaf13e36 ("[Bluetooth] Add generic driver for Bluetooth SDIO devices") Signed-off-by: Zheng Wang <zyytlz.wz@163.com> Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-04-05 11:16:38 +02:00
..
ath3k.c
bcm203x.c
bfusb.c	Bluetooth: bfusb: fix division by zero in send path	2022-01-16 09:15:38 +01:00
bluecard_cs.c
bpa10x.c
bt3c_cs.c
btbcm.c
btbcm.h
btintel.c
btintel.h
btmrvl_debugfs.c
btmrvl_drv.h
btmrvl_main.c
btmrvl_sdio.c
btmrvl_sdio.h
btmtksdio.c	Bluetooth: btmtksdio: Fix kernel oops in btmtksdio_interrupt	2022-04-15 14:18:16 +02:00
btmtkuart.c	Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync	2021-11-17 09:48:34 +01:00
btqca.c
btqca.h
btqcomsmd.c	Bluetooth: btqcomsmd: Fix command timeout after setting BD address	2023-04-05 11:16:38 +02:00
btrsi.c
btrtl.c
btrtl.h
btsdio.c	Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work	2023-04-05 11:16:38 +02:00
btusb.c	Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave()	2023-01-18 11:41:16 +01:00
btwilink.c
dtl1_cs.c
h4_recv.h
hci_ag6xx.c
hci_ath.c
hci_bcm.c	Bluetooth: hci_bcm: Check for error irq	2022-01-27 09:19:36 +01:00
hci_bcsp.c	Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave()	2023-01-18 11:41:16 +01:00
hci_h4.c
hci_h5.c	Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave()	2023-01-18 11:41:16 +01:00
hci_intel.c	Bluetooth: hci_intel: Add check for platform_driver_register	2022-08-25 11:17:47 +02:00
hci_ldisc.c
hci_ll.c	Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave()	2023-01-18 11:41:16 +01:00
hci_mrvl.c
hci_nokia.c
hci_qca.c	Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave()	2023-01-18 11:41:16 +01:00
hci_serdev.c	Bluetooth: hci_serdev: call init_rwsem() before p->open()	2022-04-15 14:18:10 +02:00
hci_uart.h
hci_vhci.c
Kconfig
Makefile