Summary
[4.1.12-124.85.1]
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang) [Orabug: 35282809] {CVE-2023-1989}
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-124.85.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-124.85.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-124.85.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-124.85.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-124.85.1.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-124.85.1.el7uek |
Vulnerabilities 1
-
High 7.0
Kernel: use after free bug in btsdio_remove due to race condition
A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdio_remove with an unfinished job may cause a race problem which leads to a UAF on hdev devices.