diff options
| author | Johan Hovold <johan@kernel.org> | 2026-06-04 09:37:36 +0300 |
|---|---|---|
| committer | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2026-06-11 21:24:40 +0300 |
| commit | eedc6867ebad73edbfaf9a0a65fbef7115cc4753 (patch) | |
| tree | d2867d361529994366880804b50a471d21450858 /tools | |
| parent | f396f4005180928cd9e15e352a6512865d3bc908 (diff) | |
| download | linux-eedc6867ebad73edbfaf9a0a65fbef7115cc4753.tar.xz | |
Bluetooth: btusb: fix use-after-free on registration failure
Make sure to release the sibling interfaces in case controller
registration fails to avoid use-after-free and double-free when they are
eventually disconnected.
This issue was reported by Sashiko while reviewing a fix for a wakeup
source leak in the btusb probe errors paths.
Link: https://sashiko.dev/#/patchset/20260402092704.2346710-1-johan%40kernel.org
Fixes: 9bfa35fe422c ("[Bluetooth] Add SCO support to btusb driver")
Fixes: 9d08f50401ac ("Bluetooth: btusb: Add support for Broadcom LM_DIAG interface")
Cc: stable@vger.kernel.org # 2.6.27
Reviewed-by: Paul Menzel <pmenzel@molgen.mpg.de>
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Diffstat (limited to 'tools')
0 files changed, 0 insertions, 0 deletions
