Linux Kernel Bluetooth Connection Handling Vulnerability Leading to Memory Corruption

A vulnerability in the Linux kernel's Bluetooth implementation has been addressed. The issue arose when multiple connection complete events were received for the same handle, causing the device to be registered multiple times. This duplication led to memory corruption. To resolve this, events for a single connection are now ignored if they are received multiple times. Additionally, a new handle identifier, HCI_CONN_HANDLE_UNSET, has been introduced to recognize new connections, and checks have been added to ensure events do not contain invalid handles.

Impact

The vulnerability could lead to memory corruption due to improper handling of Bluetooth connection events.