An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c.

References

• https://nvd.nist.gov/vuln/detail/CVE-2019-15917
• torvalds/linux@56897b2
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.5
• https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html
• https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html
• https://seclists.org/bugtraq/2020/Jan/10
• https://security.netapp.com/advisory/ntap-20191004-0001/
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html
• http://packetstormsecurity.com/files/155890/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html