summaryrefslogtreecommitdiff
path: root/net/bluetooth
AgeCommit message (Expand)AuthorFilesLines
33 hoursBluetooth: MGMT: Fix backward compatibility with userspaceLuiz Augusto von Dentz1-2/+3
33 hoursBluetooth: L2CAP: use chan timer to close channels in cleanup_listen()Siwei Zhang1-7/+9
33 hoursuse less confusing names for iov_iter direction initializersAl Viro3-3/+3
33 hoursBluetooth: serialize accept_q accessJiexun Wang1-22/+65
33 hoursBluetooth: Init sk_peer_* on bt_sock_allocLuiz Augusto von Dentz3-28/+25
33 hoursBluetooth: Consolidate code around sk_alloc into a helper functionLuiz Augusto von Dentz6-45/+29
33 hoursBluetooth: MGMT: validate Add Extended Advertising Data lengthMichael Bommarito1-0/+6
33 hoursBluetooth: hci_sync: Make use of hci_cmd_sync_queue set 2Luiz Augusto von Dentz1-1/+1
33 hoursBluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()Safa Karakuş4-9/+70
33 hoursBluetooth: hci_event: fix potential UAF in SSP passkey handlersShuvam Pandey1-4/+14
33 hoursBluetooth: L2CAP: reject BR/EDR signaling packets over MTUsigMichael Bommarito1-0/+46
33 hoursBluetooth: fix memory leak in error path of hci_alloc_dev()Bharath Reddy1-2/+4
33 hoursBluetooth: bnep: reject short frames before parsingZhang Cen1-21/+36
33 hoursBluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension ha...Dudu Lu1-3/+10
33 hoursBluetooth: RFCOMM: validate skb length in MCC handlersSeungJu Cheon1-18/+49
33 hoursBluetooth: MGMT: validate advertising TLV before type checksZhang Cen1-6/+6
33 hoursBluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()Zhang Cen1-4/+22
33 hoursBluetooth: HIDP: fix missing length checks in hidp_input_report()Muhammad Bilal1-5/+18
33 hoursBluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !connSiwei Zhang1-1/+3
33 hoursBluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rspLuiz Augusto von Dentz1-5/+22
33 hoursBluetooth: l2cap: clear chan->ident on ECRED reconfiguration successZhenghang Xiao1-2/+8
33 hoursBluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()Zhao Dongdong1-0/+2
2026-06-01Bluetooth: bnep: Fix UAF read of dev->nameJann Horn1-1/+1
2026-06-01Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rspDudu Lu1-0/+6
2026-06-01Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFERPauli Virtanen1-3/+0
2026-06-01Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTULuiz Augusto von Dentz1-1/+1
2026-06-01Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()Siwei Zhang1-0/+3
2026-06-01Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()Siwei Zhang1-0/+3
2026-06-01Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()Siwei Zhang1-0/+3
2026-06-01Bluetooth: af_bluetooth: Fix deadlockLuiz Augusto von Dentz1-7/+3
2026-06-01Bluetooth: hci_core: Fix use-after-free in vhci_flush()Kuniyuki Iwashima1-4/+30
2026-04-18Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQLuiz Augusto von Dentz1-1/+9
2026-04-18Bluetooth: SMP: force responder MITM requirements before building the pairing...Oleh Konko1-1/+5
2026-04-18Bluetooth: SMP: derive legacy responder STK authentication from MITM stateOleh Konko1-4/+1
2026-04-18Bluetooth: MGMT: validate LTK enc_size on loadKeenan Dong1-0/+3
2026-04-18Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loopHyunwoo Kim1-7/+12
2026-04-18Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cbHelen Koike1-0/+3
2026-04-18Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_holdHyunwoo Kim1-3/+7
2026-04-18Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecre...Hyunwoo Kim1-0/+5
2026-04-18Bluetooth: HIDP: Fix possible UAFLuiz Augusto von Dentz1-2/+14
2026-04-18Bluetooth: SMP: make SM/PER/KDU/BI-04-C happyChristian Eggers1-1/+1
2026-04-18Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDUChristian Eggers1-0/+1
2026-04-18Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTUChristian Eggers1-3/+7
2026-04-18Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before accessLukas Johannes Möller1-2/+4
2026-04-18Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()Lukas Johannes Möller1-2/+2
2026-03-04Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQLuiz Augusto von Dentz1-0/+7
2026-03-04Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQLuiz Augusto von Dentz1-1/+2
2026-03-04Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQLuiz Augusto von Dentz1-18/+45
2026-03-04Bluetooth: hci_conn: use mod_delayed_work for active mode timeoutStefan Sørensen1-2/+2
2026-02-11Bluetooth: hci_event: call disconnect callback before deleting connPauli Virtanen1-0/+3