Linux bluetooth development
 help / color / mirror / Atom feed
* [PATCH v2] bluetooth: fix hci_dev registration leak in virtbt_probe
@ 2026-06-28 12:16 WenTao Liang
  2026-06-28 13:16 ` [v2] " bluez.test.bot
  0 siblings, 1 reply; 2+ messages in thread
From: WenTao Liang @ 2026-06-28 12:16 UTC (permalink / raw)
  To: linux-bluetooth
  Cc: marcel, luiz.dentz, linux-kernel, stable, WenTao Liang, Greg KH

When virtbt_open_vdev fails after hci_register_dev succeeds, the
open_failed error path calls hci_free_dev, which only releases the
allocation reference. The Bluetooth subsystem still holds a registration
reference and keeps the device on hci_dev_list. Fix by calling
hci_unregister_dev first, then hci_free_dev, matching the pattern in
virtbt_remove.

Suggested-by: Greg KH <gregkh@linuxfoundation.org>
Fixes: dc65b4b0f90a ("Bluetooth: virtio_bt: fix device removal")
Cc: stable@vger.kernel.org
Signed-off-by: WenTao Liang <vulab@iscas.ac.cn>
---
Changes in v2:
- Fix patch format based on reviewer feedback
---
 drivers/bluetooth/virtio_bt.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/drivers/bluetooth/virtio_bt.c b/drivers/bluetooth/virtio_bt.c
index 140ab55c9fc5..bf6827431bb8 100644
--- a/drivers/bluetooth/virtio_bt.c
+++ b/drivers/bluetooth/virtio_bt.c
@@ -397,6 +397,7 @@ static int virtbt_probe(struct virtio_device *vdev)
 	return 0;
 
 open_failed:
+	hci_unregister_dev(hdev);
 	hci_free_dev(hdev);
 failed:
 	vdev->config->del_vqs(vdev);
-- 
2.39.5 (Apple Git-154)


^ permalink raw reply related	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2026-06-28 13:16 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-06-28 12:16 [PATCH v2] bluetooth: fix hci_dev registration leak in virtbt_probe WenTao Liang
2026-06-28 13:16 ` [v2] " bluez.test.bot

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox