summaryrefslogtreecommitdiff
path: root/net/bluetooth
AgeCommit message (Expand)AuthorFilesLines
2023-06-14Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irkLuiz Augusto von Dentz1-4/+4
2023-06-14Bluetooth: L2CAP: Add missing checks for invalid DCIDSungwoo Kim1-0/+9
2023-06-14Bluetooth: Fix l2cap_disconnect_req deadlockYing Hsu1-0/+4
2023-06-09bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()Ruihan Li1-0/+28
2023-05-30Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rspMin Li1-1/+0
2023-05-17bluetooth: Perform careful capability checks in hci_sock_ioctl()Ruihan Li1-1/+8
2023-04-20Bluetooth: Fix race condition in hidp_session_threadMin Li1-1/+1
2023-04-20Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp}Luiz Augusto von Dentz1-18/+6
2023-03-11Bluetooth: hci_sock: purge socket queues in the destruct() callbackNguyen Dinh Phi1-4/+7
2023-03-11Bluetooth: L2CAP: Fix potential user-after-freeLuiz Augusto von Dentz2-24/+8
2023-02-06Bluetooth: hci_sync: cancel cmd_timer if hci_open failedArchie Pusaka1-0/+1
2023-01-18Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave()Yang Yingliang1-1/+1
2023-01-18Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave()Yang Yingliang1-1/+1
2023-01-18Bluetooth: L2CAP: Fix u8 overflowSungwoo Kim1-1/+2
2022-12-14Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()Wang ShaoBo1-0/+1
2022-12-08Bluetooth: L2CAP: Fix accepting connection request for invalid SPSMLuiz Augusto von Dentz1-0/+13
2022-11-25Bluetooth: L2CAP: Fix l2cap_global_chan_by_psmLuiz Augusto von Dentz1-1/+1
2022-11-10Bluetooth: L2CAP: Fix attempting to access uninitialized memoryLuiz Augusto von Dentz1-1/+2
2022-11-10Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()Zhengchao Shao1-0/+1
2022-11-10Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sduMaxim Mikityanskiy1-7/+41
2022-10-26Bluetooth: L2CAP: Fix user-after-freeLuiz Augusto von Dentz1-0/+7
2022-10-26Bluetooth: hci_sysfs: Fix attempting to call device_add multiple timesLuiz Augusto von Dentz1-0/+3
2022-10-26Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()Tetsuo Handa1-4/+6
2022-09-05Bluetooth: L2CAP: Fix build errors in some archsLuiz Augusto von Dentz1-5/+5
2022-08-25Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regressionLuiz Augusto von Dentz1-7/+6
2022-08-25Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_putLuiz Augusto von Dentz1-13/+48
2022-07-29Bluetooth: SCO: Fix sco_send_frame returning skb->lenLuiz Augusto von Dentz1-4/+6
2022-07-29Bluetooth: Fix passing NULL to PTR_ERRLuiz Augusto von Dentz2-2/+2
2022-07-29Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsgLuiz Augusto von Dentz2-43/+53
2022-07-29Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsgLuiz Augusto von Dentz1-23/+11
2022-06-14Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeoutYing Hsu1-8/+13
2022-05-15Bluetooth: Fix the creation of hdev->nameItay Iellin1-3/+3
2022-04-20Bluetooth: Fix use after free in hci_send_aclLuiz Augusto von Dentz1-1/+2
2022-02-08Bluetooth: refactor malicious adv data checkBrian Gix1-5/+5
2022-01-27Bluetooth: Fix debugfs entry leak in hci_register_dev()Wei Yongjun1-0/+1
2022-01-27Bluetooth: stop proccessing malicious adv dataPavel Skripkin1-1/+7
2022-01-27Bluetooth: cmtp: fix possible panic when cmtp_init_sockets() failsWang Hai1-3/+1
2022-01-27Bluetooth: fix init and cleanup of sco_conn.timeout_workDesmond Cheong Zhi Xi1-5/+4
2022-01-27Bluetooth: schedule SCO timeouts with delayed_workDesmond Cheong Zhi Xi1-6/+29
2021-11-26Bluetooth: fix use-after-free error in lock_sock_nested()Wang ShaoBo1-1/+9
2021-11-26Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()Takashi Iwai1-8/+16
2021-09-22Bluetooth: avoid circular locks in sco_sock_connectDesmond Cheong Zhi Xi1-23/+16
2021-09-22Bluetooth: skip invalid hci_sync_conn_complete_evtDesmond Cheong Zhi Xi1-0/+15
2021-09-22Bluetooth: add timeout sanity check to hci_inquiryPavel Skripkin1-0/+6
2021-09-22Bluetooth: Move shutdown callback before flushing tx and rx queueKai-Heng Feng1-0/+8
2021-09-22Bluetooth: fix repeated calls to sco_sock_killDesmond Cheong Zhi Xi1-5/+1
2021-09-22Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflowColin Ian King1-1/+1
2021-09-22Bluetooth: sco: prevent information leak in sco_conn_defer_accept()Dan Carpenter1-0/+5
2021-08-26Bluetooth: hidp: use correct wait queue when removing ctrl_waitOle Bjørn Midtbø1-1/+1
2021-08-15Bluetooth: defer cleanup of resources in hci_unregister_dev()Tetsuo Handa3-24/+44