Luiz Augusto von Dentz 3e4697ffdf Bluetooth: L2CAP: Fix attempting to access uninitialized memory ...

commit b1a2cd50c0357f243b7435a732b4e62ba3157a2e upstream.

On l2cap_parse_conf_req the variable efs is only initialized if
remote_efs has been set.

CVE: CVE-2022-42895
CC: stable@vger.kernel.org
Reported-by: Tamás Koczka <poprdi@google.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Reviewed-by: Tedd Ho-Jeong An <tedd.an@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-11-10 18:15:36 +01:00

..

bnep

Bluetooth: bnep: Use the correct print format

2021-06-26 07:12:40 +02:00

cmtp

Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() fails

2022-01-27 11:03:03 +01:00

hidp

Bluetooth: hidp: Use the correct print format

2021-06-26 07:12:40 +02:00

rfcomm

Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release

2022-10-26 12:34:44 +02:00

6lowpan.c

Bluetooth: 6lowpan: Use the correct print format

2021-06-26 07:12:41 +02:00

a2mp.c

Bluetooth: a2mp: Use the correct print format

2021-06-26 07:12:41 +02:00

a2mp.h

Bluetooth: Replace zero-length array with flexible-array member

2020-02-28 08:30:02 +01:00

af_bluetooth.c

Bluetooth: fix indentation and alignment reported by checkpatch

2021-01-29 16:51:45 +01:00

amp.c

Bluetooth: amp: Use the correct print format

2021-06-26 07:12:41 +02:00

amp.h

…

aosp.c

Bluetooth: Add support for reading AOSP vendor capabilities

2021-04-06 14:11:23 -07:00

aosp.h

Bluetooth: Add support for reading AOSP vendor capabilities

2021-04-06 14:11:23 -07:00

ecdh_helper.c

crypto: ecdh - move curve_id of ECDH from the key to algorithm name

2021-03-13 00:04:03 +11:00

ecdh_helper.h

Fix misc new gcc warnings

2021-04-27 17:05:53 -07:00

hci_conn.c

Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed

2022-04-08 14:23:41 +02:00

hci_core.c

Bluetooth: hci_core: Fix not handling link timeouts propertly

2022-10-26 12:34:46 +02:00

hci_debugfs.c

Bluetooth: use inclusive language when filtering devices

2021-06-26 07:12:44 +02:00

hci_debugfs.h

…

hci_event.c

Bluetooth: protect le accept and resolv lists with hdev->lock

2022-07-12 16:35:07 +02:00

hci_request.c

Bluetooth: use hdev lock in activate_scan for hci_is_adv_monitoring

2022-06-09 10:22:58 +02:00

hci_request.h

Bluetooth: Resume advertising after LE connection

2020-11-09 13:33:19 +01:00

hci_sock.c

Bluetooth: defer cleanup of resources in hci_unregister_dev()

2021-08-05 12:15:24 -07:00

hci_sysfs.c

Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times

2022-10-26 12:35:36 +02:00

Kconfig

Bluetooth: Add support for reading AOSP vendor capabilities

2021-04-06 14:11:23 -07:00

l2cap_core.c

Bluetooth: L2CAP: Fix attempting to access uninitialized memory

2022-11-10 18:15:36 +01:00

l2cap_sock.c

Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt()

2022-01-27 11:03:58 +01:00

leds.c

…

leds.h

…

lib.c

Bluetooth: Introduce debug feature when dynamic debug is disabled

2020-05-11 12:16:27 +02:00

Makefile

Bluetooth: Add support for reading AOSP vendor capabilities

2021-04-06 14:11:23 -07:00

mgmt_config.c

Bluetooth: mgmt: Use the correct print format

2021-06-26 07:12:42 +02:00

mgmt_config.h

Bluetooth: mgmt: Add commands for runtime configuration

2020-06-18 13:11:03 +03:00

mgmt_util.c

…

mgmt_util.h

…

mgmt.c

Bluetooth: MGMT: Use hci_dev_test_and_{set,clear}_flag

2022-01-27 11:03:31 +01:00

msft.c

Bluetooth: msft: Use the correct print format

2021-06-26 07:12:42 +02:00

msft.h

Bluetooth: Allow Microsoft extension to indicate curve validation

2021-04-08 12:26:34 +02:00

sco.c

Bluetooth: SCO: Fix sco_send_frame returning skb->len

2022-07-29 17:25:30 +02:00

selftest.c

crypto: ecdh - move curve_id of ECDH from the key to algorithm name

2021-03-13 00:04:03 +11:00

selftest.h

…

smp.c

Bluetooth: use inclusive language in HCI role comments

2021-06-26 07:12:43 +02:00

smp.h

Bluetooth: use inclusive language in SMP

2021-06-26 07:12:37 +02:00