Luiz Augusto von Dentz cec736e60d Bluetooth: ISO: Fix not validating setsockopt user input ...

commit 9e8742cdfc upstream.

Check user input length before copying data.

Fixes: ccf74f2390 ("Bluetooth: Add BTPROTO_ISO socket type")
Fixes: 0731c5ab4d ("Bluetooth: ISO: Add support for BT_PKT_STATUS")
Fixes: f764a6c2c1 ("Bluetooth: ISO: Add broadcast support")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
[Xiangyu:  Bp to fix CVE: CVE-2024-35964 resolved minor conflicts]
Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-11-22 15:37:32 +01:00

..

bnep

Bluetooth: bnep: fix wild-memory-access in proto_unregister

2024-11-01 01:56:01 +01:00

cmtp

…

hidp

…

rfcomm

Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change

2024-10-17 15:22:19 +02:00

6lowpan.c

…

a2mp.c

…

a2mp.h

…

af_bluetooth.c

Revert "Bluetooth: af_bluetooth: Fix deadlock"

2024-11-17 15:07:19 +01:00

amp.c

…

amp.h

…

aosp.c

…

aosp.h

…

ecdh_helper.c

…

ecdh_helper.h

…

eir.c

…

eir.h

…

hci_codec.c

…

hci_codec.h

…

hci_conn.c

Revert "Bluetooth: hci_conn: Consolidate code for aborting connections"

2024-11-17 15:07:19 +01:00

hci_core.c

Bluetooth: hci_core: Fix calling mgmt_device_connected

2024-11-22 15:37:29 +01:00

hci_debugfs.c

…

hci_debugfs.h

…

hci_event.c

Bluetooth: hci_event: Remove code to removed CONFIG_BT_HS

2024-11-22 15:37:29 +01:00

hci_request.c

…

hci_request.h

…

hci_sock.c

Bluetooth: hci_sock: Fix not validating setsockopt user input

2024-10-17 15:21:33 +02:00

hci_sync.c

Revert "Bluetooth: hci_conn: Consolidate code for aborting connections"

2024-11-17 15:07:19 +01:00

hci_sysfs.c

…

iso.c

Bluetooth: ISO: Fix not validating setsockopt user input

2024-11-22 15:37:32 +01:00

Kconfig

…

l2cap_core.c

Bluetooth: L2CAP: Fix uaf in l2cap_connect

2024-11-17 15:07:22 +01:00

l2cap_sock.c

…

leds.c

…

leds.h

…

lib.c

…

Makefile

…

mgmt_config.c

…

mgmt_config.h

…

mgmt_util.c

…

mgmt_util.h

…

mgmt.c

Revert "Bluetooth: hci_conn: Consolidate code for aborting connections"

2024-11-17 15:07:19 +01:00

msft.c

…

msft.h

…

sco.c

Bluetooth: SCO: Fix UAF on sco_sock_timeout

2024-11-01 01:56:05 +01:00

selftest.c

…

selftest.h

…

smp.c

Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"

2024-09-12 11:10:17 +02:00

smp.h

…