diff options
| author | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2026-06-01 21:45:42 +0300 |
|---|---|---|
| committer | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2026-06-03 18:22:48 +0300 |
| commit | 5cbf290b79351971f20c7a533247e8d58a3f970c (patch) | |
| tree | f5e87f4bacedd40c9e964198fe1a6d7a881668c3 | |
| parent | 37b3009bf5976e8ab77c8b9a9bc3bbd7ff49e37f (diff) | |
| download | linux-5cbf290b79351971f20c7a533247e8d58a3f970c.tar.xz | |
Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync
hci_get_route() returns a reference-counted hci_dev pointer via
hci_dev_hold(). The function exits normally or with an error without ever
releasing it.
Fixes: 07a9342b94a9 ("Bluetooth: ISO: Send BIG Create Sync via hci_sync")
Reported-by: Sashiko <sashiko-bot@kernel.org>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
| -rw-r--r-- | net/bluetooth/iso.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/bluetooth/iso.c b/net/bluetooth/iso.c index 876649556d3c..3d707c43bdc0 100644 --- a/net/bluetooth/iso.c +++ b/net/bluetooth/iso.c @@ -1595,6 +1595,7 @@ static void iso_conn_big_sync(struct sock *sk) release_sock(sk); hci_dev_unlock(hdev); + hci_dev_put(hdev); } static int iso_sock_recvmsg(struct socket *sock, struct msghdr *msg, |