summaryrefslogtreecommitdiff
path: root/net/bluetooth
AgeCommit message (Expand)Author
10 daysBluetooth: RFCOMM: take rfcomm_mutex for the deferred setup acceptAli Ahmet Memis
2026-08-23Bluetooth: HIDP: reject frames without a transaction headerSangho Lee
2026-08-19Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdevLuiz Augusto von Dentz
2026-08-19Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn refMarco Elver
2026-08-19Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_holdHyunwoo Kim
2026-08-19Bluetooth: SCO: Fix UAF on sco_sock_timeoutLuiz Augusto von Dentz
2026-08-19Bluetooth: HIDP: validate numbered report payloadsSangho Lee
2026-08-19Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rspJiale Yao
2026-08-19Bluetooth: RFCOMM: Fix session UAF in set_termiosChengfeng Ye
2026-07-24Bluetooth: L2CAP: Fix regressions caused by reusing identLuiz Augusto von Dentz
2026-07-24Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lockRunyu Xiao
2026-07-24Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()Hyunwoo Kim
2026-07-24Bluetooth: L2CAP: Fix not tracking outstanding TX identLuiz Augusto von Dentz
2026-07-24Bluetooth: L2CAP: validate option length before reading conf opt valueMuhammad Bilal
2026-07-24Bluetooth: fix UAF in bt_accept_dequeue()Yousef Alhouseen
2026-07-24Bluetooth: bnep: pin L2CAP connection during netdev registrationYousef Alhouseen
2026-06-19Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()Siwei Zhang
2026-06-19use less confusing names for iov_iter direction initializersAl Viro
2026-06-19Bluetooth: serialize accept_q accessJiexun Wang
2026-06-19Bluetooth: Init sk_peer_* on bt_sock_allocLuiz Augusto von Dentz
2026-06-19Bluetooth: Consolidate code around sk_alloc into a helper functionLuiz Augusto von Dentz
2026-06-19Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()Safa Karakuş
2026-06-19Bluetooth: hci_event: fix potential UAF in SSP passkey handlersShuvam Pandey
2026-06-19Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsigMichael Bommarito
2026-06-19Bluetooth: MGMT: validate advertising TLV before type checksZhang Cen
2026-06-19Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()Zhang Cen
2026-06-19Bluetooth: hci_core: Fix use-after-free in vhci_flush()Kuniyuki Iwashima
2026-06-19Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !connSiwei Zhang
2026-06-19Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rspLuiz Augusto von Dentz
2026-06-19Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration successZhenghang Xiao
2026-06-19Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt()Zhao Dongdong
2026-06-01Bluetooth: bnep: Fix UAF read of dev->nameJann Horn
2026-06-01Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rspDudu Lu
2026-06-01Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFERPauli Virtanen
2026-06-01Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTULuiz Augusto von Dentz
2026-06-01Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()Siwei Zhang
2026-06-01Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()Siwei Zhang
2026-06-01Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()Siwei Zhang
2026-04-18Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQLuiz Augusto von Dentz
2026-04-18Bluetooth: SMP: force responder MITM requirements before building the pairing...Oleh Konko
2026-04-18Bluetooth: SMP: derive legacy responder STK authentication from MITM stateOleh Konko
2026-04-18Bluetooth: MGMT: validate LTK enc_size on loadKeenan Dong
2026-04-18Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loopHyunwoo Kim
2026-04-18Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cbHelen Koike
2026-04-18Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecre...Hyunwoo Kim
2026-04-18Bluetooth: HIDP: Fix possible UAFLuiz Augusto von Dentz
2026-04-18Bluetooth: SMP: make SM/PER/KDU/BI-04-C happyChristian Eggers
2026-04-18Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDUChristian Eggers
2026-04-18Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTUChristian Eggers
2026-04-18Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before accessLukas Johannes Möller