CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's Bluetooth subsystem, specifically in the handling of ISO connections where the socket may not be properly locked, potentially leading to null pointer dereferences. This could result in instability or crashes in Bluetooth functionality, impacting systems that rely on Bluetooth connectivity. Linux system administrators and developers working with Bluetooth implementations should prioritize addressing this issue to ensure system reliability and security.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_connect_ind Accessing iso_pi(sk)->conn requires lock_sock, which is not taken in the "ev3" part of iso_connect_ind. It may also be NULL if socket has transitioned away from the LISTEN/CONNECT states before locking. Fix by adding lock/release. Recheck hcon is valid after lock acquire where needed.