Re: [PATCH] Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
From: patchwork-bot+bluetooth
Date: Fri Nov 07 2025 - 14:10:40 EST
Hello:
This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>:
On Wed, 5 Nov 2025 14:28:41 -0500 you wrote:
> There is a KASAN: slab-use-after-free read in btusb_disconnect().
> Calling "usb_driver_release_interface(&btusb_driver, data->intf)" will
> free the btusb data associated with the interface. The same data is
> then used later in the function, hence the UAF.
>
> Fix by moving the accesses to btusb data to before the data is free'd.
>
> [...]
Here is the summary with links:
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
https://git.kernel.org/bluetooth/bluetooth-next/c/162d88a68ccb
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html