summaryrefslogtreecommitdiff
path: root/net/bluetooth
AgeCommit message (Expand)AuthorFilesLines
2026-08-09Bluetooth: HIDP: validate numbered report payloadsSangho Lee1-2/+3
2026-08-09Bluetooth: HIDP: reject frames without a transaction headerSangho Lee1-10/+15
2026-08-09Bluetooth: mgmt: fix UAF in pair command cancellationZihan Xi1-18/+46
2026-08-09Bluetooth: mgmt: fix pending command UAF in EIR updatesZihan Xi1-2/+18
2026-08-09Bluetooth: hci_sync: fix hci_conn_del() use in hci_le_create_conn_syncPauli Virtanen1-1/+3
2026-08-09Bluetooth: hci_conn: hold conn reference in abort_conn_sync()Pauli Virtanen1-1/+11
2026-08-09Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if existsPauli Virtanen2-2/+4
2026-08-09Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qosPauli Virtanen1-1/+1
2026-08-09Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rspJiale Yao1-0/+5
2026-08-09Bluetooth: ISO: clear iso_data always when detaching conn from hconPauli Virtanen1-0/+1
2026-08-03Bluetooth: RFCOMM: Fix session UAF in set_termiosChengfeng Ye2-4/+20
2026-08-03Bluetooth: hci_sync: Protect UUID list traversalChengfeng Ye1-2/+11
2026-08-03Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmdsPauli Virtanen1-4/+22
2026-08-03Bluetooth: mgmt: fix locking in unpair_device/disconnect_syncPauli Virtanen1-0/+16
2026-07-24jiffies: Define secs_to_jiffies()Easwar Hariharan1-2/+0
2026-07-24Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdevLuiz Augusto von Dentz1-15/+3
2026-07-24Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handleLuiz Augusto von Dentz1-1/+1
2026-07-24Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()Siwei Zhang2-32/+122
2026-07-24Bluetooth: hci_sync: annotate data-races around hdev->req_statusCen Zhang2-11/+11
2026-07-24Bluetooth: separate CIS_LINK and BIS_LINK link typesPauli Virtanen6-43/+61
2026-07-24Bluetooth: hci_core: Enable buffer flow control for SCO/eSCOLuiz Augusto von Dentz3-34/+54
2026-07-24Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()Siwei Zhang4-105/+121
2026-07-24Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregisterPauli Virtanen1-2/+23
2026-07-24Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lockRunyu Xiao1-8/+2
2026-07-24Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn refMarco Elver1-14/+20
2026-07-24Bluetooth: SCO: hold sk properly in sco_conn_readyPauli Virtanen1-12/+32
2026-07-24Bluetooth: SCO: fix sleeping under spinlock in sco_conn_readyPauli Virtanen1-11/+9
2026-07-24Bluetooth: MGMT: Fix adv monitor add failure cleanupCen Zhang2-1/+3
2026-07-24Bluetooth: 6lowpan: hold L2CAP conn across debugfs controlCen Zhang2-6/+16
2026-07-24Bluetooth: hci: validate codec capability element lengthSamuel Moelius1-1/+1
2026-07-24Bluetooth: L2CAP: validate option length before reading conf opt valueMuhammad Bilal1-8/+28
2026-07-24Bluetooth: fix UAF in bt_accept_dequeue()Yousef Alhouseen2-16/+5
2026-07-24Bluetooth: bnep: pin L2CAP connection during netdev registrationYousef Alhouseen1-6/+21
2026-07-24Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_completeSamuel Page1-0/+3
2026-07-24Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUIDClaudia Draghicescu1-4/+12
2026-07-24Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices.Chris Lu1-2/+2
2026-06-19Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsigMichael Bommarito1-0/+46
2026-06-19Bluetooth: hci_sync: reject oversized Broadcast Announcement prependYuqi Xu1-0/+5
2026-06-19Bluetooth: MGMT: Fix backward compatibility with userspaceLuiz Augusto von Dentz1-2/+3
2026-06-19Bluetooth: fix memory leak in error path of hci_alloc_dev()Bharath Reddy1-2/+4
2026-06-19Bluetooth: bnep: reject short frames before parsingZhang Cen1-21/+36
2026-06-19Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension ha...Dudu Lu1-3/+10
2026-06-19Bluetooth: RFCOMM: validate skb length in MCC handlersSeungJu Cheon1-18/+49
2026-06-19Bluetooth: MGMT: validate advertising TLV before type checksZhang Cen1-6/+6
2026-06-19Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()Zhang Cen1-4/+22
2026-06-19Bluetooth: hci_conn: fix potential UAF in set_cig_params_syncPauli Virtanen1-1/+7
2026-06-19Bluetooth: hci_sync: fix UAF in hci_le_create_cis_syncDoruk Tan Ozturk1-1/+3
2026-06-19Bluetooth: ISO: serialize iso_sock_clear_timer with socket lockMuhammad Bilal1-1/+1
2026-06-19Bluetooth: ISO: fix UAF in iso_recv_frameMuhammad Bilal1-3/+7
2026-06-19Bluetooth: HIDP: fix missing length checks in hidp_input_report()Muhammad Bilal1-5/+18