In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: Check socket flag instead of hcon
This fixes the following Smatch static checker warning:
net/bluetooth/iso.c:1364 iso_sock_recvmsg() error: we previously assumed 'pi->conn->hcon' could be null (line 1359)
net/bluetooth/iso.c 1347 static int iso_sock_recvmsg(struct socket *sock, struct msghdr *msg, 1348 size_t len, int flags) 1349 { 1350 struct sock *sk = sock->sk; 1351 struct iso_pinfo *pi = iso_pi(sk); 1352 1353 BT_DBG("sk %p", sk); 1354 1355 if (test_and_clear_bit(BT_SK_DEFER_SETUP, &bt_sk(sk)->flags)) { 1356 lock_sock(sk); 1357 switch (sk->sk_state) { 1358 case BT_CONNECT2: 1359 if (pi->conn->hcon && ^^^^^^^^^^^^^^ If ->hcon is NULL
1360 test_bit(HCI_CONN_PA_SYNC, &pi->conn->hcon->flags)) { 1361 iso_conn_big_sync(sk); 1362 sk->sk_state = BT_LISTEN; 1363 } else { --> 1364 iso_conn_defer_accept(pi->conn->hcon); ^^^^^^^^^^^^^^ then we're toast
1365 sk->sk_state = BT_CONFIG; 1366 } 1367 release_sock(sk); 1368 return 0; 1369 case BT_CONNECTED: 1370 if (test_bit(BT_SK_PA_SYNC,
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Jul 30, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kselftests-kmp-rtUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade dtb-freescaleUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kernel-develUpgrade dtb-lgUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade dtb-amdUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-xilinx | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-classicUpgrade linux-image-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-azureUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04a | Nov 4, 2024 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub