summaryrefslogtreecommitdiff
path: root/net/bluetooth
AgeCommit message (Expand)Author
8 hoursBluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loopHyunwoo Kim
8 hoursBluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chanPauli Virtanen
8 hoursBluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereferencePavel Shpakovskiy
8 hoursBluetooth: L2CAP: reject accept queue add unless BT_LISTENPauli Virtanen
8 hoursBluetooth: MSFT: validate evt_prefix_len against the response lengthAli Ahmet Memis
8 hoursBluetooth: MGMT: free the HCI command when it is cancelledLinmao Li
8 hoursBluetooth: MGMT: free the mesh send cancel command when it is cancelledLinmao Li
8 hoursBluetooth: hci_sync: free the advertising instance on the failure and cancel ...Linmao Li
8 hoursBluetooth: hci_conn: fix the SCO setup context lifetimeLinmao Li
7 daysBluetooth: hci_sync: Clear HCI_CMD_PENDING when dropping the last requestIbrahim Abdelkader
7 daysBluetooth: hci_event: clear HCI_LE_ADV only on a created connectionValentin Kindschi
7 daysBluetooth: hci_core: use skb_get() instead of skb_clone() for req_skbXin Chen
7 daysBluetooth: hci_conn: re-enable advertising only for peripheral roleValentin Kindschi
7 daysBluetooth: RFCOMM: serialize security confirmation handlingChengfeng Ye
7 daysBluetooth: ISO: fix use-after-free of listener socket in iso_conn_readyHang Nan
7 daysBluetooth: eir: Fix OOB read in eir_get_service_data()HyeongJun An
2026-08-27Bluetooth: MGMT: reject HCI_CMD_SYNC params_len above 255Ali Ahmet Memis
2026-08-27Bluetooth: ISO: zero the sockaddr before returning it in getnameAli Ahmet Memis
2026-08-27Bluetooth: ISO: do not force BT_LISTEN after a failed BIG syncAli Ahmet Memis
2026-08-27Bluetooth: hci_sync: Fix accept list UAF during suspendChengfeng Ye
2026-08-27Bluetooth: hci_event: validate LE Set CIG Parameters responseLaxman Acharya Padhya
2026-08-27Bluetooth: hci_event: fix LE list UAF on resetChengfeng Ye
2026-08-27Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup acceptAli Ahmet Memis
2026-08-09Bluetooth: HIDP: validate numbered report payloadsSangho Lee
2026-08-09Bluetooth: HIDP: reject frames without a transaction headerSangho Lee
2026-08-09Bluetooth: hci_sync: Fix advertising data UAFsChengfeng Ye
2026-08-09Bluetooth: mgmt: fix UAF in pair command cancellationZihan Xi
2026-08-09Bluetooth: SCO: give the socket its own sco_conn referenceAldo Ariel Panzardo
2026-08-09Bluetooth: mgmt: fix pending command UAF in EIR updatesZihan Xi
2026-08-09Bluetooth: hci_sync: fix hci_conn_del() use in hci_le_create_conn_syncPauli Virtanen
2026-08-09Bluetooth: hci_conn: hold conn reference in abort_conn_sync()Pauli Virtanen
2026-08-09Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if existsPauli Virtanen
2026-08-09Bluetooth: ISO: fix refcounting of iso_connPauli Virtanen
2026-08-09Bluetooth: ISO: ensure no dangling hcon references in iso_connPauli Virtanen
2026-08-09Bluetooth: ISO: avoid deadlocks in iso_sock_timeoutPauli Virtanen
2026-08-09Bluetooth: ISO: fix leaking sk after socket releasePauli Virtanen
2026-08-09Bluetooth: ISO: hold sk properly in iso_conn_readyPauli Virtanen
2026-08-09Bluetooth: ISO: fix CONNECTED -> CLOSED transition on shutdown/releasePauli Virtanen
2026-08-09Bluetooth: ISO: Fix not updating BIS sender source addressLuiz Augusto von Dentz
2026-08-09Bluetooth: ISO: validate sockaddr_iso first in iso_sock_rebind_bis()Pauli Virtanen
2026-08-09Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qosPauli Virtanen
2026-08-09Bluetooth: ISO: lock sk in iso_connect_indPauli Virtanen
2026-08-09Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event pathsSeungJu Cheon
2026-08-09Bluetooth: HCI: Add initial support for PASTLuiz Augusto von Dentz
2026-08-09Bluetooth: ISO: lock sk in iso_sock_getnamePauli Virtanen
2026-08-09Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rspJiale Yao
2026-08-09Bluetooth: ISO: clear iso_data always when detaching conn from hconPauli Virtanen
2026-08-03Bluetooth: RFCOMM: Fix session UAF in set_termiosChengfeng Ye
2026-08-03Bluetooth: hci_sync: Protect UUID list traversalChengfeng Ye
2026-08-03Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmdsPauli Virtanen