CVE-2023-54120
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hidp_session_thread There is a potential race condition in hidp_session_thread that may lead to use-after-free. For instance, the timer is active while hidp_del_timer is called in hidp_session_thread(). After hidp_session_put, then 'session' will be freed, causing kernel panic when hidp_idle_timeout is running. The solution is to use del_timer_sync instead of del_timer. Here is the call trace: ? hidp_session_probe+0x780/0x780 call_timer_fn+0x2d/0x1e0 __run_timers.part.0+0x569/0x940 hidp_session_probe+0x780/0x780 call_timer_fn+0x1e0/0x1e0 ktime_get+0x5c/0xf0 lapic_next_deadline+0x2c/0x40 clockevents_program_event+0x205/0x320 run_timer_softirq+0xa9/0x1b0 __do_softirq+0x1b9/0x641 __irq_exit_rcu+0xdc/0x190 irq_exit_rcu+0xe/0x20 sysvec_apic_timer_interrupt+0xa1/0xc0
How to fix
- Linux Linux152f47bd6b995e0e98c85672f6d19894bc287ef2, 5f3d214d19899183d4e0cce7552998262112e4ab, 8a99e6200c38b78a45dcd12a6bdc43fdf4dc36be, f7ec5ca433ceead8d9d78fd2febff094f289441d, 0efb276d5848a3accc37c6f41b85e442c4768169, f6719fd8f409fa1da8dc956e93822d25e1e8b360, 248af9feca062a4ca9c3f2ccf67056c8a5eb817f, c95930abd687fcd1aa040dc4fe90dff947916460 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 152f47bd6b995e0e98c85672f6d19894bc287ef2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 5f3d214d19899183d4e0cce7552998262112e4ab, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 8a99e6200c38b78a45dcd12a6bdc43fdf4dc36be, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < f7ec5ca433ceead8d9d78fd2febff094f289441d, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 0efb276d5848a3accc37c6f41b85e442c4768169, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < f6719fd8f409fa1da8dc956e93822d25e1e8b360, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 248af9feca062a4ca9c3f2ccf67056c8a5eb817f, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < c95930abd687fcd1aa040dc4fe90dff947916460, 2.6.12 | 152f47bd6b995e0e98c85672f6d19894bc287ef2, 5f3d214d19899183d4e0cce7552998262112e4ab, 8a99e6200c38b78a45dcd12a6bdc43fdf4dc36be, f7ec5ca433ceead8d9d78fd2febff094f289441d, 0efb276d5848a3accc37c6f41b85e442c4768169, f6719fd8f409fa1da8dc956e93822d25e1e8b360, 248af9feca062a4ca9c3f2ccf67056c8a5eb817f, c95930abd687fcd1aa040dc4fe90dff947916460 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.