Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists hci_cmd_sync_queue_once() needs to indicate whether a queue item was added, so caller can know if callbacks are called, so it can avoid leaking resources. Change the function to return -EEXIST if queue item already exists. Modify all callsites to handle that.
Product status
505ea2b295929e7be2b4e1bc86ee31cb7862fb01 (git) before 0ad2ce230b38cd4b3f6732cc609e270461e626e5
505ea2b295929e7be2b4e1bc86ee31cb7862fb01 (git) before 2969554bcfccb5c609f6b6cd4a014933f3a66dd0
f00f36db76eb8fd10d13e80e2590f23b5beaa54d (git)
1499f79995c7ee58e3bfeeff75f6d1b37dcda881 (git)
357603f4d396d85fbf0045512efaf1d7f7394ed7 (git)
6.9
Any version before 6.9
6.19.12 (semver)
7.0 (original_commit_for_fix)
References
git.kernel.org/...c/0ad2ce230b38cd4b3f6732cc609e270461e626e5
git.kernel.org/...c/2969554bcfccb5c609f6b6cd4a014933f3a66dd0