CyberRota Analysis
AI-GeneratedA vulnerability in the Linux kernel affects the Bluetooth bnep module, where the bnep_add_connection() function improperly handles L2CAP connections during network device registration. This flaw can lead to a use-after-free condition, potentially allowing an attacker to exploit the vulnerability and cause system instability or unauthorized access. Organizations using Linux systems with Bluetooth capabilities should prioritize patching this issue to mitigate the risk of exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: pin L2CAP connection during netdev registration bnep_add_connection() reads the L2CAP connection without holding the channel lock, then passes its HCI device to register_netdev(). Controller teardown can clear and release that connection concurrently, leaving the network device registration path to dereference a freed parent device. Take a reference to the L2CAP connection while holding the channel lock. Retain it until register_netdev() has taken the parent device reference.