CVE-2024-36013

Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()

References

Notes

 carnil> Introduced in 73ffa904b782 ("Bluetooth: Move conf_{req,rsp} stuff to struct
 carnil> l2cap_chan"). Vulnerable versions: 3.0-rc2.

Bugs

Status

Branch Status
upstream released (6.9) [4d7b41c0e43995b0e992b9f8903109275744b658]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable N/A "Fixed before branching point"
6.12-upstream-stable N/A "Fixed before branching point"
6.8-upstream-stable released (6.8.11) [826af9d2f69567c646ff46d10393d47e30ad23c6]
6.6-upstream-stable released (6.6.32) [cfe560c7050bfb37b0d2491bbe7cd8b59e77fdc5]
6.1-upstream-stable needed
5.10-upstream-stable needed
sid released (6.8.11-1)
6.12-trixie-security N/A "Fixed before branching point"
6.1-bookworm-security needed
5.10-bullseye-security needed