Linux Kernel Bluetooth btmtksdio Interrupt Handling Vulnerability Leading to Kernel Oops

A vulnerability in the Linux kernel's Bluetooth subsystem, specifically within the btmtksdio driver, has been addressed. The issue arose because the interrupt handler, btmtksdio_interrupt, was accessing an uninitialized pointer. This situation occurred when the Bluetooth device was powered on and interrupts were enabled before the driver had fully initialized its data. As a result, the interrupt handler could cause a kernel oops, a type of error that leads to a system crash.

Impact

The vulnerability could lead to a kernel oops, causing a system crash by accessing an uninitialized pointer in the btmtksdio_interrupt handler.