diff options
| author | Jakub Kicinski <kuba@kernel.org> | 2026-04-01 19:12:23 -0700 |
|---|---|---|
| committer | Jakub Kicinski <kuba@kernel.org> | 2026-04-01 19:12:23 -0700 |
| commit | 6d6be7070e90465db098b75a755f0f191d1655c7 (patch) | |
| tree | 4d5a01d93b389af9b0ee6946fa7d9d50e1a8a25c /fs/devfs/git@git.tavy.me:linux.git | |
| parent | a54ecccfae62c5c85259ae5ea5d9c20009519049 (diff) | |
| parent | bc39a094730ce062fa034a529c93147c096cb488 (diff) | |
Merge tag 'for-net-2026-04-01' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth
Luiz Augusto von Dentz says:
====================
bluetooth pull request for net:
- hci_sync: Fix UAF in le_read_features_complete
- hci_sync: call destroy in hci_cmd_sync_run if immediate
- hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists
- hci_sync: fix leaks when hci_cmd_sync_queue_once fails
- hci_sync: fix stack buffer overflow in hci_le_big_create_sync
- hci_conn: fix potential UAF in set_cig_params_sync
- hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
- hci_event: move wake reason storage into validated event handlers
- SMP: force responder MITM requirements before building the pairing response
- SMP: derive legacy responder STK authentication from MITM state
- MGMT: validate LTK enc_size on load
- MGMT: validate mesh send advertising payload length
- SCO: fix race conditions in sco_sock_connect()
- hci_h4: Fix race during initialization
* tag 'for-net-2026-04-01' of git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth:
Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync
Bluetooth: SMP: derive legacy responder STK authentication from MITM state
Bluetooth: SMP: force responder MITM requirements before building the pairing response
Bluetooth: MGMT: validate mesh send advertising payload length
Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt
Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
Bluetooth: MGMT: validate LTK enc_size on load
Bluetooth: hci_h4: Fix race during initialization
Bluetooth: hci_sync: Fix UAF in le_read_features_complete
Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails
Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists
Bluetooth: hci_event: move wake reason storage into validated event handlers
Bluetooth: SCO: fix race conditions in sco_sock_connect()
Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate
====================
Link: https://patch.msgid.link/20260401205834.2189162-1-luiz.dentz@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Diffstat (limited to 'fs/devfs/git@git.tavy.me:linux.git')
0 files changed, 0 insertions, 0 deletions