Linux Kernel Bluetooth Mediatek btusb Interface Claiming Vulnerability

A vulnerability in the Linux kernel's Bluetooth subsystem, specifically within the Mediatek btusb driver, has been addressed. The issue arose because the usb_driver_claim_interface() function was called without the necessary device lock, leading to errors such as 'Failed to claim iso interface' and, in some cases, a NULL pointer dereference. This vulnerability was resolved by adding the appropriate locks to ensure the interface could be claimed safely.

Impact

The vulnerability could lead to improper handling of USB interface claims, causing interface management errors and potential NULL pointer dereferences.