CVE-2024-57879

Bluetooth: iso: Always release hdev at the end of iso_listen_bis

Summary

Original description

The description as published by the source.

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: iso: Always release hdev at the end of iso_listen_bis

Since hci_get_route holds the device before returning, the hdev
should be released with hci_dev_put at the end of iso_listen_bis
even if the function returns with an error.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Linux Kernel

[{"type":"ECOSYSTEM","events":[{"introduced":"6.9.0"},{"fixed":"6.12.6"}]}]

Fix status by distribution

Fixed packages published by each distribution for this CVE

BellSoft Alpaquita BELL-CVE-2024-57879 linux-lts Fixed in: 6.12.41-r0
Debian DEBIAN-CVE-2024-57879 linux Fixed in: 6.12.6-1

References

advisory github.com
advisory nvd.nist.gov
package git.kernel.org
web git.kernel.org
web git.kernel.org