Threats tagged 'ghsa-6jmv-jjw5-5rwp'

A use-after-free (UAF) vulnerability in the Linux kernel's Bluetooth subsystem (hci_event) was fixed. The flaw involved improper locking around hci_conn lookup and field access in the hci_le_remote_conn_param_req_evt function, which could lead to concurrent freeing of memory. The fix extended the hci_dev_lock critical section to cover all connection usage, preventing the race condition.