Skip to content

Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO

JIRA: https://issues.redhat.com/browse/RHEL-6358

Fix the race condition in hci_uart_tty_ioctl() between HCIUARTSETPROTO and HCIUARTGETPROTO.

Tested: public reproducer has been used to verify that the crash is not happening with the fix.

CVE: CVE-2023-31083

Signed-off-by: Jose Ignacio Tornos Martinez jtornosm@redhat.com

Edited by José Ignacio Tornos Martínez

Merge request reports