mbox series

[SRU,F/J,0/1] CVE-2024-26886

Message ID 20240628200307.72936-1-magali.lemes@canonical.com
Headers show
Series CVE-2024-26886 | expand

Message

Magali Lemes June 28, 2024, 8:03 p.m. UTC
[Impact]
lock_sock on bt_sock_recvmsg() from net/bluetooth/af_bluetooth.c
may cause a deadlock.

[Backport]
Due to the lack of f4b41f062c42 ("net: remove noblock parameter from
skb_recv_datagram()"), Jammy and Focal had a small context conflict.
Focal also had another context conflict due to it not having
b8ddc3b14c7a ("Bluetooth: fix indentation and alignment reported by
checkpatch").

[Test]
Compile tested.

[Where problems could occur]
Any issues here would direcly impact Bluetooth usage.

[Other info]
This is also a follow-up fix to CVE-2023-51779.

Luiz Augusto von Dentz (1):
  Bluetooth: af_bluetooth: Fix deadlock

 net/bluetooth/af_bluetooth.c | 10 +++-------
 1 file changed, 3 insertions(+), 7 deletions(-)

Comments

Manuel Diewald July 1, 2024, 10:17 a.m. UTC | #1
On Fri, Jun 28, 2024 at 05:03:05PM -0300, Magali Lemes wrote:
> [Impact]
> lock_sock on bt_sock_recvmsg() from net/bluetooth/af_bluetooth.c
> may cause a deadlock.
> 
> [Backport]
> Due to the lack of f4b41f062c42 ("net: remove noblock parameter from
> skb_recv_datagram()"), Jammy and Focal had a small context conflict.
> Focal also had another context conflict due to it not having
> b8ddc3b14c7a ("Bluetooth: fix indentation and alignment reported by
> checkpatch").
> 
> [Test]
> Compile tested.
> 
> [Where problems could occur]
> Any issues here would direcly impact Bluetooth usage.
> 
> [Other info]
> This is also a follow-up fix to CVE-2023-51779.
> 
> Luiz Augusto von Dentz (1):
>   Bluetooth: af_bluetooth: Fix deadlock
> 
>  net/bluetooth/af_bluetooth.c | 10 +++-------
>  1 file changed, 3 insertions(+), 7 deletions(-)
> 
> -- 
> 2.34.1
> 
> 
> -- 
> kernel-team mailing list
> kernel-team@lists.ubuntu.com
> https://lists.ubuntu.com/mailman/listinfo/kernel-team

Acked-by: Manuel Diewald <manuel.diewald@canonical.com>
Thibault Ferrante July 2, 2024, 11:10 a.m. UTC | #2
On 28-06-2024 22:03, Magali Lemes wrote:
> [Impact]
> lock_sock on bt_sock_recvmsg() from net/bluetooth/af_bluetooth.c
> may cause a deadlock.
> 
> [Backport]
> Due to the lack of f4b41f062c42 ("net: remove noblock parameter from
> skb_recv_datagram()"), Jammy and Focal had a small context conflict.
> Focal also had another context conflict due to it not having
> b8ddc3b14c7a ("Bluetooth: fix indentation and alignment reported by
> checkpatch").
> 
> [Test]
> Compile tested.
> 
> [Where problems could occur]
> Any issues here would direcly impact Bluetooth usage.
> 
> [Other info]
> This is also a follow-up fix to CVE-2023-51779.
> 
> Luiz Augusto von Dentz (1):
>    Bluetooth: af_bluetooth: Fix deadlock
> 
>   net/bluetooth/af_bluetooth.c | 10 +++-------
>   1 file changed, 3 insertions(+), 7 deletions(-)
> 

Acked-by: Thibault Ferrante <thibault.ferrante@canonical.com>

--
Thibault
Stefan Bader July 4, 2024, 5:14 p.m. UTC | #3
On 28.06.24 22:03, Magali Lemes wrote:
> [Impact]
> lock_sock on bt_sock_recvmsg() from net/bluetooth/af_bluetooth.c
> may cause a deadlock.
> 
> [Backport]
> Due to the lack of f4b41f062c42 ("net: remove noblock parameter from
> skb_recv_datagram()"), Jammy and Focal had a small context conflict.
> Focal also had another context conflict due to it not having
> b8ddc3b14c7a ("Bluetooth: fix indentation and alignment reported by
> checkpatch").
> 
> [Test]
> Compile tested.
> 
> [Where problems could occur]
> Any issues here would direcly impact Bluetooth usage.
> 
> [Other info]
> This is also a follow-up fix to CVE-2023-51779.
> 
> Luiz Augusto von Dentz (1):
>    Bluetooth: af_bluetooth: Fix deadlock
> 
>   net/bluetooth/af_bluetooth.c | 10 +++-------
>   1 file changed, 3 insertions(+), 7 deletions(-)
> 

Applied to jammy,focal:linux/master-next. Thanks.

-Stefan