aboutsummaryrefslogtreecommitdiff
path: root/net/bluetooth
AgeCommit message (Expand)AuthorFilesLines
2026-05-20Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()Safa Karakuş5-10/+78
2026-05-20Bluetooth: MGMT: validate Add Extended Advertising Data lengthMichael Bommarito1-0/+6
2026-05-20Bluetooth: ISO: drop ISO_END frames received without prior ISO_STARTDavid Carlier1-0/+5
2026-05-20Bluetooth: hci_sync: Fix not setting mask for HCI_EVT_LE_ALL_REMOTE_FEATURES_...Luiz Augusto von Dentz1-3/+3
2026-05-20Bluetooth: bnep: Fix UAF read of dev->nameJann Horn1-1/+1
2026-05-14Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointerMichael Bommarito1-1/+1
2026-05-14Bluetooth: serialize accept_q accessJiexun Wang1-22/+65
2026-05-06Bluetooth: HIDP: serialise l2cap_unregister_user via hidp_session_semMichael Bommarito1-3/+24
2026-05-06Bluetooth: hci_event: fix memset typoJann Horn1-1/+1
2026-05-06Bluetooth: RFCOMM: pull credit byte with skb_pull_data()Pengpeng Hou1-2/+5
2026-05-06Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event pathsSeungJu Cheon1-24/+30
2026-05-06Bluetooth: ISO: Fix data-race on dst in iso_sock_connect()SeungJu Cheon1-1/+1
2026-05-06Bluetooth: SCO: hold sk properly in sco_conn_readyPauli Virtanen1-12/+32
2026-05-06Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()Siwei Zhang1-0/+3
2026-05-06Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()Siwei Zhang1-0/+3
2026-05-06Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()Siwei Zhang1-0/+3
2026-05-06Bluetooth: l2cap: defer conn param update to avoid conn->lock/hdev->lock inve...Mikhail Gavrilov2-29/+88
2026-05-06Bluetooth: l2cap: fix MPS check in l2cap_ecred_reconf_reqDudu Lu1-1/+1
2026-05-06Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension ha...Dudu Lu1-3/+10
2026-05-06Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_com...Luiz Augusto von Dentz1-2/+25
2026-05-06Bluetooth: hci_conn: fix potential UAF in create_big_syncDavid Carlier1-1/+18
2026-05-06Bluetooth: SCO: fix sleeping under spinlock in sco_conn_readyPauli Virtanen1-11/+9
2026-04-23net: remove ISDN subsystem and Bluetooth CMTPJakub Kicinski8-1522/+0
2026-04-14Merge tag 'net-next-7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/net...Linus Torvalds6-13/+36
2026-04-13Merge tag 'vfs-7.1-rc1.kino' of git://git.kernel.org/pub/scm/linux/kernel/git...Linus Torvalds1-2/+2
2026-04-13Bluetooth: hci_event: fix potential UAF in SSP passkey handlersShuvam Pandey1-4/+14
2026-04-13Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(...Stefan Metzmacher1-1/+2
2026-04-13Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rspDudu Lu1-0/+6
2026-04-13Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFERPauli Virtanen1-3/+0
2026-04-13Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if existsPauli Virtanen2-2/+4
2026-04-13Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTULuiz Augusto von Dentz1-1/+1
2026-04-10Bluetooth: L2CAP: CoC: Disconnect if received packet size exceeds MPSChristian Eggers1-0/+7
2026-04-10Bluetooth: hci_core: Rate limit the logging of invalid ISO handlePauli Virtanen1-2/+2
2026-04-01Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_synchkbinbin1-1/+2
2026-04-01Bluetooth: SMP: derive legacy responder STK authentication from MITM stateOleh Konko1-4/+1
2026-04-01Bluetooth: SMP: force responder MITM requirements before building the pairing...Oleh Konko1-1/+5
2026-04-01Bluetooth: MGMT: validate mesh send advertising payload lengthKeenan Dong1-3/+11
2026-04-01Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evtPauli Virtanen1-13/+20
2026-04-01Bluetooth: hci_conn: fix potential UAF in set_cig_params_syncPauli Virtanen1-1/+7
2026-04-01Bluetooth: MGMT: validate LTK enc_size on loadKeenan Dong1-0/+3
2026-04-01Bluetooth: hci_sync: Fix UAF in le_read_features_completeLuiz Augusto von Dentz1-5/+5
2026-04-01Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once failsPauli Virtanen1-2/+11
2026-04-01Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if existsPauli Virtanen1-17/+36
2026-04-01Bluetooth: hci_event: move wake reason storage into validated event handlersOleh Konko1-59/+35
2026-04-01Bluetooth: SCO: fix race conditions in sco_sock_connect()Cen Zhang1-5/+21
2026-04-01Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediatePauli Virtanen1-2/+9
2026-03-25Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loopHyunwoo Kim1-7/+12
2026-03-25Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()Hyunwoo Kim1-5/+3
2026-03-25Bluetooth: L2CAP: Fix send LE flow credits in ACL linkZhang Chen1-0/+4
2026-03-19Bluetooth: L2CAP: Fix regressions caused by reusing identLuiz Augusto von Dentz1-3/+26
generated by cgit