Linux Kernel Bluetooth Interface Release Vulnerability in Mediatek USB Drivers

A vulnerability in the Linux kernel's Bluetooth subsystem, specifically within the Mediatek USB driver, has been addressed. The issue arose because the Mediatek driver did not properly release a USB interface used for ISO data transmission before unregistering the Bluetooth HCI device during a USB disconnect. This oversight could lead to a kernel panic when the Bluetooth USB dongle is removed, as the system attempted to unregister the HCI device without the interface being properly released.

Impact

Failure to release the USB interface before disconnecting the Bluetooth dongle can cause a kernel panic during the HCI device unregistration process, potentially leading to a system crash.