In the Linux kernel, the following vulnerability has been resolved:Bluetooth: iso: Always release hdev at the end of iso_listen_bisSince hci_get_route holds the device before returning, the hdevshould be released with hci_dev_put at the end of iso_listen_biseven if the function returns with an error.
No PoCs from references.
- https://github.com/oogasawa/Utility-security