Linux kernel bug fix: Bluetooth: hci_core: lookup hci_conn on RX path on protocol side
Subsystem: bluetooth (net/bluetooth/l2cap_core.c)
Bug type: use-after-free, severity: critical
Keywords: UAF
Files changed: include/net/bluetooth/hci_core.h;net/bluetooth/hci_core.c;net/bluetooth/iso.c;net/bluetooth/l2cap_core.c;net/bluetooth/sco.c
Introduced by Luiz Augusto von Dentz on 2023-08-11 11:53:30 -0700; fixed by Pauli Virtanen on 2025-11-20 17:01:09 -0500 (lifetime: 832 days)