https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 21:46:02 +0000 https://cve.radiocsirt.org/vuln/cve-2024-41062 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>bluetooth/l2cap: sync sock recv cb and release</p> <p>The problem occurs between the system call to close the sock and hci_rx_work, where the former releases the sock and the latter accesses it without lock protection.</p> <p>CPU0 CPU1 ---- ---- sock_close hci_rx_work l2cap_sock_release hci_acldata_packet l2cap_sock_kill l2cap_recv_frame sk_free l2cap_conless_channel l2cap_sock_recv_cb</p> <p>If hci_rx_work processes the data that needs to be received before the sock is closed, then everything is normal; Otherwise, the work thread may access the released sock when receiving data.</p> <p>Add a chan mutex in the rx callback of the sock to achieve synchronization between the sock release and recv cb.</p> <p>Sock is dead, so set chan data to NULL, avoid others use invalid sock pointer.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>bluetooth/l2cap: sync sock recv cb and release</p> <p>The problem occurs between the system call to close the sock and hci_rx_work, where the former releases the sock and the latter accesses it without lock protection.</p> <p>CPU0 CPU1 ---- ---- sock_close hci_rx_work l2cap_sock_release hci_acldata_packet l2cap_sock_kill l2cap_recv_frame sk_free l2cap_conless_channel l2cap_sock_recv_cb</p> <p>If hci_rx_work processes the data that needs to be received before the sock is closed, then everything is normal; Otherwise, the work thread may access the released sock when receiving data.</p> <p>Add a chan mutex in the rx callback of the sock to achieve synchronization between the sock release and recv cb.</p> <p>Sock is dead, so set chan data to NULL, avoid others use invalid sock pointer.</p> https://cve.radiocsirt.org/vuln/cve-2024-41062