In the Linux kernel before 5.16.3, drivers/bluetooth/hciqca.c misinterprets the devmgpiodgetindex_optional return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-5.14.0-1024-oem", "binary_version": "5.14.0-1024.26" }, { "binary_name": "linux-headers-5.14.0-1024-oem", "binary_version": "5.14.0-1024.26" }, { "binary_name": "linux-image-unsigned-5.14.0-1024-oem", "binary_version": "5.14.0-1024.26" }, { "binary_name": "linux-image-unsigned-5.14.0-1024-oem-dbgsym", "binary_version": "5.14.0-1024.26" }, { "binary_name": "linux-modules-5.14.0-1024-oem", "binary_version": "5.14.0-1024.26" }, { "binary_name": "linux-oem-5.14-headers-5.14.0-1024", "binary_version": "5.14.0-1024.26" }, { "binary_name": "linux-oem-5.14-tools-5.14.0-1024", "binary_version": "5.14.0-1024.26" }, { "binary_name": "linux-oem-5.14-tools-host", "binary_version": "5.14.0-1024.26" }, { "binary_name": "linux-tools-5.14.0-1024-oem", "binary_version": "5.14.0-1024.26" } ] }