AZL-58893
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-58893.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-58893
- Upstream
- Published
- 2024-04-17T11:15:10Z
- Modified
- 2026-04-21T04:37:09.644786Z
- Summary
- CVE-2024-26886 affecting package kernel 5.15.200.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: af_bluetooth: Fix deadlock
Attemting to do socklock on .recvmsg may cause a deadlock as shown bellow, so instead of using socksock this uses skreceivequeue.lock on btsockioctl to avoid the UAF:
INFO: task kworker/u9:1:121 blocked for more than 30 seconds. Not tainted 6.7.6-lemon #183 Workqueue: hci0 hcirxwork Call Trace: <TASK> __schedule+0x37d/0xa00 schedule+0x32/0xe0 __lock_sock+0x68/0xa0 ? __pfxautoremovewakefunction+0x10/0x10 locksocknested+0x43/0x50 l2capsockrecvcb+0x21/0xa0 l2caprecvframe+0x55b/0x30a0 ? psitaskswitch+0xeb/0x270 ? finishtaskswitch.isra.0+0x93/0x2a0 hcirxwork+0x33a/0x3f0 processonework+0x13a/0x2f0 worker_thread+0x2f0/0x410 ? __pfxworkerthread+0x10/0x10 kthread+0xe0/0x110 ? __pfxkthread+0x10/0x10 retfrom_fork+0x2c/0x50 ? __pfxkthread+0x10/0x10 retfromforkasm+0x1b/0x30 </TASK>
- References