linux-kernel - Re: [PATCH v2 bluetooth-next] Bluetooth: vhci: Prevent use-after-free by removing debugfs files early

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: 
 <175632180931.807633.7126813775951779992.git-patchwork-notify@kernel.org>
Date: Wed, 27 Aug 2025 19:10:09 +0000
From: patchwork-bot+bluetooth@...nel.org
To: Ivan Pravdin <ipravdin.official@...il.com>
Cc: marcel@...tmann.org, luiz.dentz@...il.com, mmandlik@...gle.com,
 linux-bluetooth@...r.kernel.org, linux-kernel@...r.kernel.org,
 pmenzel@...gen.mpg.de
Subject: Re: [PATCH v2 bluetooth-next] Bluetooth: vhci: Prevent use-after-free
 by
 removing debugfs files early

Hello:

This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@...el.com>:

On Wed, 27 Aug 2025 10:53:25 -0400 you wrote:
> Move the creation of debugfs files into a dedicated function, and ensure
> they are explicitly removed during vhci_release(), before associated
> data structures are freed.
> 
> Previously, debugfs files such as "force_suspend", "force_wakeup", and
> others were created under hdev->debugfs but not removed in
> vhci_release(). Since vhci_release() frees the backing vhci_data
> structure, any access to these files after release would result in
> use-after-free errors.
> 
> [...]

Here is the summary with links:
  - [v2,bluetooth-next] Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
    https://git.kernel.org/bluetooth/bluetooth-next/c/c27de1739b83

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html