Zheng Wang 179c658285 Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition ... commit 73f7b171b7 upstream. In btsdio_probe, the data->work is bound with btsdio_work. It will be started in btsdio_send_frame. If the btsdio_remove runs with a unfinished work, there may be a race condition that hdev is freed but used in btsdio_work. Fix it by canceling the work before do cleanup in btsdio_remove. Fixes: CVE-2023-1989 Fixes: ddbaf13e36 ("[Bluetooth] Add generic driver for Bluetooth SDIO devices") Cc: stable@vger.kernel.org Signed-off-by: Zheng Wang <zyytlz.wz@163.com> Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com> [ Denis: Added CVE-2023-1989 and fixes tags. ] Signed-off-by: Denis Efremov (Oracle) <efremov@linux.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2023-09-06 21:27:01 +01:00
..
Kconfig	…
Makefile	…
ath3k.c	…
bcm203x.c	…
bfusb.c	…
bluecard_cs.c	…
bpa10x.c	…
bt3c_cs.c	…
btbcm.c	Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set	2023-05-24 17:32:39 +01:00
btbcm.h	…
btintel.c	Bluetooth: btintel: Add LE States quirk support	2023-05-24 17:32:39 +01:00
btintel.h	…
btmrvl_debugfs.c	…
btmrvl_drv.h	…
btmrvl_main.c	…
btmrvl_sdio.c	…
btmrvl_sdio.h	…
btmtk.c	…
btmtk.h	…
btmtksdio.c	…
btmtkuart.c	…
btqca.c	…
btqca.h	…
btqcomsmd.c	Bluetooth: btqcomsmd: Fix command timeout after setting BD address	2023-03-30 12:49:12 +02:00
btrsi.c	…
btrtl.c	Bluetooth: btrtl: Add the support for RTL8851B	2023-05-24 17:32:40 +01:00
btrtl.h	Bluetooth: btrtl: add support for the RTL8723CS	2023-05-24 17:32:39 +01:00
btsdio.c	Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition	2023-09-06 21:27:01 +01:00
btusb.c	Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally	2023-08-23 17:52:25 +02:00
dtl1_cs.c	…
h4_recv.h	…
hci_ag6xx.c	…
hci_ath.c	…
hci_bcm.c	…
hci_bcsp.c	…
hci_h4.c	…
hci_h5.c	Bluetooth: btrtl: add support for the RTL8723CS	2023-05-24 17:32:39 +01:00
hci_intel.c	…
hci_ldisc.c	…
hci_ll.c	…
hci_mrvl.c	…
hci_nokia.c	…
hci_qca.c	Bluetooth: hci_qca: fix debugfs registration	2023-06-14 11:15:28 +02:00
hci_serdev.c	…
hci_uart.h	…
hci_vhci.c	…
virtio_bt.c	…