1 files changed, 5 insertions, 0 deletions

diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c
index 79ffcdef0b7a..22a110f37abc 100644
--- a/net/bluetooth/sco.c
+++ b/net/bluetooth/sco.c
@@ -1003,6 +1003,11 @@ static int sco_sock_getsockopt(struct socket *sock, int level, int optname,
 
         case BT_SNDMTU:
         case BT_RCVMTU:
+                if (sk->sk_state != BT_CONNECTED) {
+                        err = -ENOTCONN;
+                        break;
+                }
+
                 if (put_user(sco_pi(sk)->conn->mtu, (u32 __user *)optval))
                         err = -EFAULT;
                 break;