Luiz Augusto von Dentz 3e4697ffdf Bluetooth: L2CAP: Fix attempting to access uninitialized memory ...

commit b1a2cd50c0357f243b7435a732b4e62ba3157a2e upstream.

On l2cap_parse_conf_req the variable efs is only initialized if
remote_efs has been set.

CVE: CVE-2022-42895
CC: stable@vger.kernel.org
Reported-by: Tamás Koczka <poprdi@google.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Reviewed-by: Tedd Ho-Jeong An <tedd.an@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-11-10 18:15:36 +01:00

..

bnep

…

cmtp

…

hidp

…

rfcomm

Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release

2022-10-26 12:34:44 +02:00

6lowpan.c

…

a2mp.c

…

a2mp.h

…

af_bluetooth.c

…

amp.c

…

amp.h

…

aosp.c

…

aosp.h

…

ecdh_helper.c

…

ecdh_helper.h

…

hci_conn.c

…

hci_core.c

Bluetooth: hci_core: Fix not handling link timeouts propertly

2022-10-26 12:34:46 +02:00

hci_debugfs.c

…

hci_debugfs.h

…

hci_event.c

Bluetooth: protect le accept and resolv lists with hdev->lock

2022-07-12 16:35:07 +02:00

hci_request.c

Bluetooth: use hdev lock in activate_scan for hci_is_adv_monitoring

2022-06-09 10:22:58 +02:00

hci_request.h

…

hci_sock.c

…

hci_sysfs.c

Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times

2022-10-26 12:35:36 +02:00

Kconfig

…

l2cap_core.c

Bluetooth: L2CAP: Fix attempting to access uninitialized memory

2022-11-10 18:15:36 +01:00

l2cap_sock.c

…

leds.c

…

leds.h

…

lib.c

…

Makefile

…

mgmt_config.c

…

mgmt_config.h

…

mgmt_util.c

…

mgmt_util.h

…

mgmt.c

…

msft.c

…

msft.h

…

sco.c

Bluetooth: SCO: Fix sco_send_frame returning skb->len

2022-07-29 17:25:30 +02:00

selftest.c

…

selftest.h

…

smp.c

…

smp.h

…