In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: bnep: fix wild-memory-access in proto_unregister
There's issue as follows: KASAN: maybe wild-memory-access in range [0xdead...108-0xdead...10f] CPU: 3 UID: 0 PID: 2805 Comm: rmmod Tainted: G W RIP: 0010:protounregister+0xee/0x400 Call Trace: <TASK> _dosysdeletemodule+0x318/0x580 dosyscall64+0xc1/0x1d0 entrySYSCALL64after_hwframe+0x77/0x7f
As bnepinit() ignore bnepsockinit()'s return value, and bnepsockinit() will cleanup all resource. Then when remove bnep module will call bnepsockcleanup() to cleanup sock's resource. To solve above issue just return bnepsockinit()'s return value in bnepexit().
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c151aeb6dc414db8f4daf51be072e802fae6667",
"target": {
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-01e1b75b",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"242216912252540641674510470920377416945",
"86071553080103707650550136686083316602",
"287807435217937965997917723435354882153",
"180948695724259244069464010403639980644",
"286342681309262708538279699704351055118"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e232728242c4e98fb30e4c6bedb6ba8b482b6301",
"target": {
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-114ea960",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"242216912252540641674510470920377416945",
"86071553080103707650550136686083316602",
"287807435217937965997917723435354882153",
"180948695724259244069464010403639980644",
"286342681309262708538279699704351055118"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6c151aeb6dc414db8f4daf51be072e802fae6667",
"target": {
"function": "bnep_init",
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-18685cd6",
"signature_version": "v1",
"digest": {
"length": 353.0,
"function_hash": "331069649568267529499694810088316814574"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e232728242c4e98fb30e4c6bedb6ba8b482b6301",
"target": {
"function": "bnep_init",
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-2874a64f",
"signature_version": "v1",
"digest": {
"length": 353.0,
"function_hash": "331069649568267529499694810088316814574"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64a90991ba8d4e32e3173ddd83d0b24167a5668c",
"target": {
"function": "bnep_init",
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-31f5b112",
"signature_version": "v1",
"digest": {
"length": 353.0,
"function_hash": "331069649568267529499694810088316814574"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@03015b6329e6de42f03ec917c25c4cf944f81f66",
"target": {
"function": "bnep_init",
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-354c407e",
"signature_version": "v1",
"digest": {
"length": 353.0,
"function_hash": "331069649568267529499694810088316814574"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d10cd7bf574ead01fae140ce117a11bcdacbe6a8",
"target": {
"function": "bnep_init",
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-47b3610d",
"signature_version": "v1",
"digest": {
"length": 353.0,
"function_hash": "331069649568267529499694810088316814574"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa58e23ea1359bd24b323916d191e2e9b4b19783",
"target": {
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-54ef36cf",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"242216912252540641674510470920377416945",
"86071553080103707650550136686083316602",
"287807435217937965997917723435354882153",
"180948695724259244069464010403639980644",
"286342681309262708538279699704351055118"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@20c424bc475b2b2a6e0e2225d2aae095c2ab2f41",
"target": {
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-576a774b",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"242216912252540641674510470920377416945",
"86071553080103707650550136686083316602",
"287807435217937965997917723435354882153",
"180948695724259244069464010403639980644",
"286342681309262708538279699704351055118"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fa58e23ea1359bd24b323916d191e2e9b4b19783",
"target": {
"function": "bnep_init",
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-7641eec2",
"signature_version": "v1",
"digest": {
"length": 353.0,
"function_hash": "331069649568267529499694810088316814574"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2c439470b23d78095a0d2f923342df58b155f669",
"target": {
"function": "bnep_init",
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-7857a73a",
"signature_version": "v1",
"digest": {
"length": 353.0,
"function_hash": "331069649568267529499694810088316814574"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64a90991ba8d4e32e3173ddd83d0b24167a5668c",
"target": {
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-7bc959b6",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"242216912252540641674510470920377416945",
"86071553080103707650550136686083316602",
"287807435217937965997917723435354882153",
"180948695724259244069464010403639980644",
"286342681309262708538279699704351055118"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2c439470b23d78095a0d2f923342df58b155f669",
"target": {
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-c17fa225",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"242216912252540641674510470920377416945",
"86071553080103707650550136686083316602",
"287807435217937965997917723435354882153",
"180948695724259244069464010403639980644",
"286342681309262708538279699704351055118"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d10cd7bf574ead01fae140ce117a11bcdacbe6a8",
"target": {
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-c5d3efbe",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"242216912252540641674510470920377416945",
"86071553080103707650550136686083316602",
"287807435217937965997917723435354882153",
"180948695724259244069464010403639980644",
"286342681309262708538279699704351055118"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@03015b6329e6de42f03ec917c25c4cf944f81f66",
"target": {
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-dbe8a0bb",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"242216912252540641674510470920377416945",
"86071553080103707650550136686083316602",
"287807435217937965997917723435354882153",
"180948695724259244069464010403639980644",
"286342681309262708538279699704351055118"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@20c424bc475b2b2a6e0e2225d2aae095c2ab2f41",
"target": {
"function": "bnep_init",
"file": "net/bluetooth/bnep/core.c"
},
"deprecated": false,
"id": "CVE-2024-50148-ef1642f8",
"signature_version": "v1",
"digest": {
"length": 353.0,
"function_hash": "331069649568267529499694810088316814574"
},
"signature_type": "Function"
}
]