linux/net/bluetooth/iso.c
Luiz Augusto von Dentz 14bcb721d2 Bluetooth: ISO: Fix UAF on iso_sock_timeout
[ Upstream commit 246b435ad6 ]

conn->sk maybe have been unlinked/freed while waiting for iso_conn_lock
so this checks if the conn->sk is still valid by checking if it part of
iso_sk_list.

Fixes: ccf74f2390 ("Bluetooth: Add BTPROTO_ISO socket type")
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-11-01 01:58:30 +01:00

2153 lines
45 KiB