Bug 3995 - [ANCK 4.19] CVE-2022-42896
Summary: [ANCK 4.19] CVE-2022-42896
Status: RESOLVED FIXED
Alias: None
Product: ANCK 4.19 Dev
Classification: ANCK
Component: drivers (show other bugs) drivers
Version: 4.19-026.x
Hardware: All Linux
: P3-Medium S3-normal
Target Milestone: ---
Assignee: GuixinLiu
QA Contact: shuming
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-02-08 16:12 UTC by songkai
Modified: 2023-10-24 15:49 UTC (History)
2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description songkai inspur_group 2023-02-08 16:12:49 UTC 
The Bluetooth spec states that the valid range for SPSM is from
0x0001-0x00ff so it is invalid to accept values outside of this range:

  BLUETOOTH CORE SPECIFICATION Version 5.3 | Vol 3, Part A
  page 1059:
  Table 4.15: L2CAP_LE_CREDIT_BASED_CONNECTION_REQ SPSM ranges

  upstream a2045d57e844864605d39e6cfd2237861d800f13修复此问题
Comment 1 小龙 admin 2023-05-29 14:05:14 UTC 
The PR Link: https://gitee.com/anolis/cloud-kernel/pulls/1675
Comment 2 GuixinLiu alibaba_cloud_group 2023-10-24 15:49:17 UTC 
fixed