From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from fhigh-b4-smtp.messagingengine.com (fhigh-b4-smtp.messagingengine.com [202.12.124.155]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 59ACC282F35 for ; Wed, 13 May 2026 13:05:41 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=202.12.124.155 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778677542; cv=none; b=ufEKxjnVZPIwRGoarofHMpv6Ga9RKGQN7zuuxvCaq7S6CwA3wHATZ3dDjVIfBIRUt6I+29DgAuyPe3A0OdtEeFpvOPBIMDai8WNIG4FhLsfbk99IMYTt6qKdj+UvBdmVXi287ETtqUb7k4amR3iglCHEYFPUI08X5lBvCbFCUUc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778677542; c=relaxed/simple; bh=pOAjCEVsOt3sjNrSU2GVZODzb4uckoGbEXs9JNcIL88=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=dWzom8x6PuIaLs0Iop+zskWtTvdSH3RCNmSK9+3a6B8XyKdN9letxNB2xgMVZAtlfWMxFDmvGHPxw0zTkKqdAwowy8X1HFjYH2YeEFzNDIjzF+6ygPB48WDxBD6EnHK72XceXKSYgz1V9vwiPjz/Pv922RU+zDxt0Raike4a9ng= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=fourdim.xyz; spf=pass smtp.mailfrom=fourdim.xyz; dkim=pass (2048-bit key) header.d=fourdim.xyz header.i=@fourdim.xyz header.b=f42ZQ0u4; dkim=pass (2048-bit key) header.d=messagingengine.com header.i=@messagingengine.com header.b=pNgPNj0j; arc=none smtp.client-ip=202.12.124.155 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=fourdim.xyz Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=fourdim.xyz Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=fourdim.xyz header.i=@fourdim.xyz header.b="f42ZQ0u4"; dkim=pass (2048-bit key) header.d=messagingengine.com header.i=@messagingengine.com header.b="pNgPNj0j" Received: from phl-compute-04.internal (phl-compute-04.internal [10.202.2.44]) by mailfhigh.stl.internal (Postfix) with ESMTP id 867017A0076; Wed, 13 May 2026 09:05:40 -0400 (EDT) Received: from phl-frontend-04 ([10.202.2.163]) by phl-compute-04.internal (MEProxy); Wed, 13 May 2026 09:05:40 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fourdim.xyz; h= cc:cc:content-transfer-encoding:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=fm2; t=1778677540; x= 1778763940; bh=UrfoVDgmukh5MHmyEcxHrBiAtWE/cElCFUzuarcZtic=; b=f 42ZQ0u49FEjel9NmCfS+wh8x44wPgKw0JbeIufHqO7ht2Ix5EXuQDZncrQ35YEFX 1ixM0n+EvHsYLWzG5yx/pIxEShsr0+XxBn8zEGAsHYDfMI+Lu8RreBXN8hFHU0kk 276W8hoFckP4Kp5ktsb5sAeeqmYl4bRXT6PXynp7n315dQa+Atc9f+aAkTnTVB4f e4fx2NgX0yiERHYam+QpFpVmKJXYKuVDy6XNwmEg82nztf/kPtRcFLdkWYEeZ9WO 8XRTswGqCzkMuFKOOMaTDvvqo890Zvhm4uAv1tbVbTR3HRmTYyCxpJfd1WhR+caX R+YauPsJmG8M5ZXqP1m9g== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to:x-me-proxy:x-me-sender :x-me-sender:x-sasl-enc; s=fm3; t=1778677540; x=1778763940; bh=U rfoVDgmukh5MHmyEcxHrBiAtWE/cElCFUzuarcZtic=; b=pNgPNj0jlBAFuzaRj 411UHwH57X//QeEkDvRWkqyqJyqfpcS9++X9dLrZkPB+XfwBHXuNyLZBrRw8+aTv 4YbIRm1Ji+3Jf4DVKXoaEpiO1DWcvFSXod9uH3Ppn8tgZVXuOnRvEyXVuJKFusiK rRaHGt7yoPEFew9fzgS9qF1yjHI+oLT6TVaUtdB0O802PSfq/hDLasN9WkuZi3iJ OvCcm51dp0MYQYKqkN3Dd/0whHYvu1q99FKEEjEg8ccU90GD43yAu8169+wrAqVi H1IBjqXl9jUn2w7unygxn0Ltb7EEJ6QmsF0xLE6k9/81IjRuuvNdPhxVT1hKkVLb lh7mw== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefhedrtddtgdduvdegjeefucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfurfetoffkrfgpnffqhgenuceu rghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmnegfrh hlucfvnfffucdlfeehmdenucfjughrpefhvfevufffkffojghfggfgsedtkeertdertddt necuhfhrohhmpefuihifvghiucgkhhgrnhhguceoohhsshesfhhouhhrughimhdrgiihii eqnecuggftrfgrthhtvghrnhepkedtleeiteevueetudevjeefheejueevffejteffvdeh lefftdffleegleduvdfhnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrg hilhhfrhhomhepohhsshesfhhouhhrughimhdrgiihiidpnhgspghrtghpthhtohepfedp mhhouggvpehsmhhtphhouhhtpdhrtghpthhtohepshhtrggslhgvsehvghgvrhdrkhgvrh hnvghlrdhorhhgpdhrtghpthhtohepohhsshesfhhouhhrughimhdrgiihiidprhgtphht thhopehluhhiiidrvhhonhdruggvnhhtiiesihhnthgvlhdrtghomh X-ME-Proxy: Feedback-ID: if72e4b10:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Wed, 13 May 2026 09:05:40 -0400 (EDT) From: Siwei Zhang To: stable@vger.kernel.org Cc: Siwei Zhang , Luiz Augusto von Dentz Subject: [PATCH 5.15.y] Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() Date: Wed, 13 May 2026 09:05:51 -0400 Message-ID: <20260513130557.2195176-1-oss@fourdim.xyz> X-Mailer: git-send-email 2.54.0 In-Reply-To: <2026051217-footing-cement-0817@gregkh> References: <2026051217-footing-cement-0817@gregkh> Precedence: bulk X-Mailing-List: stable@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Add the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_sock_ready_cb(). Fixes: 8d836d71e222 ("Bluetooth: Access sk_sndtimeo indirectly in l2cap_core.c") Cc: stable@kernel.org Signed-off-by: Siwei Zhang Signed-off-by: Luiz Augusto von Dentz --- net/bluetooth/l2cap_sock.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/net/bluetooth/l2cap_sock.c b/net/bluetooth/l2cap_sock.c index 1960d35b3be0..adee617517bb 100644 --- a/net/bluetooth/l2cap_sock.c +++ b/net/bluetooth/l2cap_sock.c @@ -1725,6 +1725,9 @@ static long l2cap_sock_get_sndtimeo_cb(struct l2cap_chan *chan) { struct sock *sk = chan->data; + if (!sk) + return 0; + return sk->sk_sndtimeo; } -- 2.54.0