summaryrefslogtreecommitdiff
path: root/net/bluetooth
AgeCommit message (Expand)AuthorFilesLines
5 daysBluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()Siwei Zhang4-105/+121
5 daysBluetooth: 6lowpan: fix cyclic locking warning on netdev unregisterPauli Virtanen1-2/+23
5 daysBluetooth: SCO: hold sk properly in sco_conn_readyPauli Virtanen1-12/+32
5 daysBluetooth: SCO: fix sleeping under spinlock in sco_conn_readyPauli Virtanen1-11/+9
5 daysBluetooth: L2CAP: fix tx ident leak for commands without a responseStig Hornang1-2/+13
5 daysBluetooth: sco: Fix a race condition in sco_sock_timeout()Sungwoo Kim1-1/+14
5 daysBluetooth: MGMT: Fix adv monitor add failure cleanupCen Zhang2-1/+3
5 daysBluetooth: 6lowpan: hold L2CAP conn across debugfs controlCen Zhang2-6/+16
5 daysBluetooth: hci: validate codec capability element lengthSamuel Moelius1-1/+1
5 daysBluetooth: hci_core: Fix UAF in hci_unregister_dev()Jordan Walters1-0/+2
5 daysBluetooth: hci_event: fix simultaneous discovery stuck in FINDINGJiajia Liu1-0/+7
5 daysBluetooth: eir: Fix stack OOB write when prepending the Flags ADWeiming Shi1-3/+5
11 daysBluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdevLuiz Augusto von Dentz1-15/+3
11 daysBluetooth: L2CAP: validate option length before reading conf opt valueMuhammad Bilal1-8/+28
11 daysBluetooth: L2CAP: cancel pending_rx_work before taking conn->lockRunyu Xiao1-8/+2
11 daysBluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync()Muhammad Bilal1-1/+12
11 daysBluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()Siwei Zhang2-32/+122
11 daysBluetooth: fix UAF in bt_accept_dequeue()Yousef Alhouseen2-16/+5
11 daysBluetooth: bnep: pin L2CAP connection during netdev registrationYousef Alhouseen1-6/+21
11 daysBluetooth: MGMT: Fix UAF of hci_conn_params in add_device_completeSamuel Page1-0/+3
11 daysBluetooth: L2CAP: Fix UAF in channel timeout by holding conn refMarco Elver1-14/+20
2026-06-19Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsigMichael Bommarito1-0/+46
2026-06-19Bluetooth: hci_sync: reject oversized Broadcast Announcement prependYuqi Xu1-0/+5
2026-06-19Bluetooth: MGMT: Fix backward compatibility with userspaceLuiz Augusto von Dentz1-2/+3
2026-06-19Bluetooth: SCO: Fix data-race on sco_pi fields in sco_connectSeungJu Cheon1-5/+15
2026-06-19Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route callsSeungJu Cheon1-16/+44
2026-06-19Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_syncLuiz Augusto von Dentz1-0/+1
2026-06-19Bluetooth: fix memory leak in error path of hci_alloc_dev()Bharath Reddy1-2/+4
2026-06-19Bluetooth: bnep: reject short frames before parsingZhang Cen1-21/+36
2026-06-19Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension ha...Dudu Lu1-3/+10
2026-06-19Bluetooth: RFCOMM: validate skb length in MCC handlersSeungJu Cheon1-18/+49
2026-06-19Bluetooth: MGMT: validate advertising TLV before type checksZhang Cen1-6/+6
2026-06-19Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()Zhang Cen1-4/+22
2026-06-09Bluetooth: hci_sync: fix UAF in hci_le_create_cis_syncDoruk Tan Ozturk1-1/+3
2026-06-09Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate()Pavitra Jha1-1/+3
2026-06-09Bluetooth: ISO: serialize iso_sock_clear_timer with socket lockMuhammad Bilal1-1/+1
2026-06-09Bluetooth: ISO: fix UAF in iso_recv_frameMuhammad Bilal1-3/+7
2026-06-09Bluetooth: HIDP: fix missing length checks in hidp_input_report()Muhammad Bilal1-5/+18
2026-06-09Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !connSiwei Zhang1-1/+3
2026-06-09Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()Siwei Zhang1-7/+9
2026-06-09Bluetooth: hci_sync: Reset device counters in hci_dev_close_sync()Heitor Alves de Siqueira1-0/+4
2026-06-09Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device closeHeitor Alves de Siqueira1-0/+8
2026-06-09Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rspLuiz Augusto von Dentz1-5/+22
2026-06-09Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration successZhenghang Xiao1-2/+8
2026-06-09Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()Zhao Dongdong1-0/+2
2026-06-01Bluetooth: serialize accept_q accessJiexun Wang1-22/+65
2026-06-01Bluetooth: MGMT: validate Add Extended Advertising Data lengthMichael Bommarito1-0/+6
2026-06-01Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointerMichael Bommarito1-1/+1
2026-06-01Bluetooth: bnep: Fix UAF read of dev->nameJann Horn1-1/+1
2026-06-01Bluetooth: ISO: drop ISO_END frames received without prior ISO_STARTDavid Carlier1-0/+5