Bluetooth: iso: Always release hdev at the end of iso_listen_bis

BugLink: https://bugs.launchpad.net/bugs/2102181

[ Upstream commit 9c76fff747a73ba01d1d87ed53dd9c00cb40ba05 ]

Since hci_get_route holds the device before returning, the hdev
should be released with hci_dev_put at the end of iso_listen_bis
even if the function returns with an error.

Fixes: 02171da6e86a ("Bluetooth: ISO: Add hcon for listening bis sk")
Signed-off-by: Iulia Tanasescu <iulia.tanasescu@nxp.com>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
CVE-2024-57879
Signed-off-by: Koichiro Den <koichiro.den@canonical.com>
Signed-off-by: Mehmet Basaran <mehmet.basaran@canonical.com>
This commit is contained in:
Iulia Tanasescu
2025-03-13 13:21:44 +09:00
committed by Mehmet Basaran
parent 762e226947
commit 53601bfac3
+1 -2
View File
@@ -1158,10 +1158,9 @@ static int iso_listen_bis(struct sock *sk)
goto unlock;
}
hci_dev_put(hdev);
unlock:
hci_dev_unlock(hdev);
hci_dev_put(hdev);
return err;
}