summaryrefslogtreecommitdiff
path: root/net/bluetooth
AgeCommit message (Expand)AuthorFilesLines
27 hoursBluetooth: hci_sync: fix UAF in hci_le_create_cis_syncDoruk Tan Ozturk1-1/+3
27 hoursBluetooth: ISO: serialize iso_sock_clear_timer with socket lockMuhammad Bilal1-1/+1
27 hoursBluetooth: ISO: fix UAF in iso_recv_frameMuhammad Bilal1-3/+7
27 hoursBluetooth: HIDP: fix missing length checks in hidp_input_report()Muhammad Bilal1-5/+18
27 hoursBluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !connSiwei Zhang1-1/+3
27 hoursBluetooth: L2CAP: use chan timer to close channels in cleanup_listen()Siwei Zhang1-7/+9
27 hoursBluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device closeHeitor Alves de Siqueira1-0/+8
27 hoursBluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rspLuiz Augusto von Dentz1-5/+22
27 hoursBluetooth: l2cap: clear chan->ident on ECRED reconfiguration successZhenghang Xiao1-2/+8
27 hoursBluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()Zhao Dongdong1-0/+2
9 daysBluetooth: serialize accept_q accessJiexun Wang1-22/+65
9 daysBluetooth: MGMT: validate Add Extended Advertising Data lengthMichael Bommarito1-0/+6
9 daysBluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointerMichael Bommarito1-1/+1
9 daysBluetooth: bnep: Fix UAF read of dev->nameJann Horn1-1/+1
9 daysBluetooth: ISO: drop ISO_END frames received without prior ISO_STARTDavid Carlier1-0/+5
9 daysBluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()Safa Karakuş5-10/+78
2026-05-23Bluetooth: SCO: check for codecs->num_codecs == 1 before assigning to sco_pi(...Stefan Metzmacher1-1/+2
2026-05-23Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rspDudu Lu1-0/+6
2026-05-23Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFERPauli Virtanen1-3/+0
2026-05-23Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTULuiz Augusto von Dentz1-1/+1
2026-05-17Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()Siwei Zhang1-0/+3
2026-05-17Bluetooth: hci_conn: fix potential UAF in create_big_syncDavid Carlier1-1/+18
2026-05-14Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()Siwei Zhang1-0/+3
2026-05-14Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()Siwei Zhang1-0/+3
2026-05-14Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_com...Luiz Augusto von Dentz1-2/+25
2026-05-14Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()Hyunwoo Kim1-5/+3
2026-05-07Bluetooth: hci_event: fix potential UAF in SSP passkey handlersShuvam Pandey1-4/+14
2026-04-22Bluetooth: hci_sync: annotate data-races around hdev->req_statusCen Zhang3-12/+12
2026-04-11Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_synchkbinbin1-1/+2
2026-04-11Bluetooth: SMP: force responder MITM requirements before building the pairing...Oleh Konko1-1/+5
2026-04-11Bluetooth: SMP: derive legacy responder STK authentication from MITM stateOleh Konko1-4/+1
2026-04-11Bluetooth: MGMT: validate mesh send advertising payload lengthKeenan Dong1-3/+11
2026-04-11Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evtPauli Virtanen1-13/+20
2026-04-11Bluetooth: hci_conn: fix potential UAF in set_cig_params_syncPauli Virtanen1-1/+7
2026-04-11Bluetooth: MGMT: validate LTK enc_size on loadKeenan Dong1-0/+3
2026-04-11Bluetooth: SCO: fix race conditions in sco_sock_connect()Cen Zhang1-5/+21
2026-04-11Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediatePauli Virtanen1-2/+9
2026-04-02Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loopHyunwoo Kim1-7/+12
2026-04-02Bluetooth: L2CAP: Fix send LE flow credits in ACL linkZhang Chen1-0/+4
2026-04-02Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cbHelen Koike1-0/+3
2026-04-02Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_completeLuiz Augusto von Dentz1-1/+1
2026-04-02Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_holdHyunwoo Kim1-3/+7
2026-04-02Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecre...Hyunwoo Kim1-0/+5
2026-04-02Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_reqMinseo Park1-3/+3
2026-03-25Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_userShaurya Rane1-12/+8
2026-03-25Bluetooth: HIDP: Fix possible UAFLuiz Augusto von Dentz1-2/+14
2026-03-25Bluetooth: MGMT: Fix list corruption and UAF in command complete handlersWang Tao1-5/+2
2026-03-25Bluetooth: hci_sync: Fix hci_le_create_conn_syncMichael Grzeschik1-1/+1
2026-03-25Bluetooth: ISO: Fix defer tests being unstableLuiz Augusto von Dentz1-2/+2
2026-03-25Bluetooth: SMP: make SM/PER/KDU/BI-04-C happyChristian Eggers1-1/+1