]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/commit
Bluetooth: L2CAP: Fix attempting to access uninitialized memory
authorLuiz Augusto von Dentz <luiz.von.dentz@intel.com>
Mon, 31 Oct 2022 23:10:52 +0000 (16:10 -0700)
committerStefan Bader <stefan.bader@canonical.com>
Tue, 6 Dec 2022 13:45:41 +0000 (14:45 +0100)
commit0cc9714838343abc0a251ee20dfe0af8057650a3
treed235e50520f3f41b2d9c3ec12b340a5200f3d352
parent099e0bee1f0aa010d94c8421a7a6a41ca7efffbe
Bluetooth: L2CAP: Fix attempting to access uninitialized memory

BugLink: https://bugs.launchpad.net/bugs/1998843
commit b1a2cd50c0357f243b7435a732b4e62ba3157a2e upstream.

On l2cap_parse_conf_req the variable efs is only initialized if
remote_efs has been set.

CVE: CVE-2022-42895
CC: stable@vger.kernel.org
Reported-by: Tamás Koczka <poprdi@google.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Reviewed-by: Tedd Ho-Jeong An <tedd.an@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Kamal Mostafa <kamal@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
net/bluetooth/l2cap_core.c