In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: Check socket flag instead of hcon
This fixes the following Smatch static checker warning:
net/bluetooth/iso.c:1364 iso_sock_recvmsg() error: we previously assumed 'pi->conn->hcon' could be null (line 1359)
net/bluetooth/iso.c 1347 static int iso_sock_recvmsg(struct socket *sock, struct msghdr *msg, 1348 size_t len, int flags) 1349 { 1350 struct sock *sk = sock->sk; 1351 struct iso_pinfo *pi = iso_pi(sk); 1352 1353 BT_DBG("sk %p", sk); 1354 1355 if (test_and_clear_bit(BT_SK_DEFER_SETUP, &bt_sk(sk)->flags)) { 1356 lock_sock(sk); 1357 switch (sk->sk_state) { 1358 case BT_CONNECT2: 1359 if (pi->conn->hcon && ^^^^^^^^^^^^^^ If ->hcon is NULL
1360 test_bit(HCI_CONN_PA_SYNC, &pi->conn->hcon->flags)) { 1361 iso_conn_big_sync(sk); 1362 sk->sk_state = BT_LISTEN; 1363 } else { --> 1364 iso_conn_defer_accept(pi->conn->hcon); ^^^^^^^^^^^^^^ then we're toast
1365 sk->sk_state = BT_CONFIG; 1366 } 1367 release_sock(sk); 1368 return 0; 1369 case BT_CONNECTED: 1370 if (test_bit(BT_SK_PA_SYNC,
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Jul 30, 2024 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade dtb-renesasUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade kernel-defaultUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-debug-vdsoUpgrade kernel-devel-rtUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade kernel-syms-rtUpgrade dtb-armUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-rt-vdsoUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kernel-macrosUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdso | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-awsUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-gcp | Nov 4, 2024 | Jul 30, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub