summaryrefslogtreecommitdiff
path: root/net/bluetooth
AgeCommit message (Expand)AuthorFilesLines
27 hoursBluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_synchkbinbin1-1/+2
27 hoursBluetooth: SMP: force responder MITM requirements before building the pairing...Oleh Konko1-1/+5
27 hoursBluetooth: SMP: derive legacy responder STK authentication from MITM stateOleh Konko1-4/+1
27 hoursBluetooth: MGMT: validate mesh send advertising payload lengthKeenan Dong1-3/+11
27 hoursBluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evtPauli Virtanen1-13/+20
27 hoursBluetooth: hci_conn: fix potential UAF in set_cig_params_syncPauli Virtanen1-1/+7
27 hoursBluetooth: MGMT: validate LTK enc_size on loadKeenan Dong1-0/+3
27 hoursBluetooth: SCO: fix race conditions in sco_sock_connect()Cen Zhang1-5/+21
27 hoursBluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediatePauli Virtanen1-2/+9
10 daysBluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loopHyunwoo Kim1-7/+12
10 daysBluetooth: L2CAP: Fix send LE flow credits in ACL linkZhang Chen1-0/+4
10 daysBluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cbHelen Koike1-0/+3
10 daysBluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_completeLuiz Augusto von Dentz1-1/+1
10 daysBluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_holdHyunwoo Kim1-3/+7
10 daysBluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecre...Hyunwoo Kim1-0/+5
10 daysBluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_reqMinseo Park1-3/+3
2026-03-25Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_userShaurya Rane1-12/+8
2026-03-25Bluetooth: HIDP: Fix possible UAFLuiz Augusto von Dentz1-2/+14
2026-03-25Bluetooth: MGMT: Fix list corruption and UAF in command complete handlersWang Tao1-5/+2
2026-03-25Bluetooth: hci_sync: Fix hci_le_create_conn_syncMichael Grzeschik1-1/+1
2026-03-25Bluetooth: ISO: Fix defer tests being unstableLuiz Augusto von Dentz1-2/+2
2026-03-25Bluetooth: SMP: make SM/PER/KDU/BI-04-C happyChristian Eggers1-1/+1
2026-03-25Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDUChristian Eggers1-0/+1
2026-03-25Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTUChristian Eggers1-3/+7
2026-03-25Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQLuiz Augusto von Dentz1-1/+9
2026-03-25Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before accessLukas Johannes Möller1-2/+4
2026-03-25Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()Lukas Johannes Möller1-2/+2
2026-03-04Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQLuiz Augusto von Dentz1-0/+7
2026-03-04Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CO...Luiz Augusto von Dentz2-4/+19
2026-03-04Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQLuiz Augusto von Dentz1-1/+2
2026-03-04Bluetooth: L2CAP: Fix result of L2CAP_ECRED_CONN_RSP when MTU is too shortLuiz Augusto von Dentz1-6/+8
2026-03-04Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQLuiz Augusto von Dentz1-18/+45
2026-03-04Bluetooth: hci_conn: use mod_delayed_work for active mode timeoutStefan Sørensen1-2/+2
2026-03-04Bluetooth: hci_conn: Set link_policy on incoming ACL connectionsStefan Sørensen2-2/+1
2026-02-06Bluetooth: MGMT: Fix memory leak in set_ssp_completeJianpeng Chang1-0/+3
2026-01-08tty: introduce and use tty_port_tty_vhangup() helperJiri Slaby (SUSE)1-6/+1
2025-12-07Bluetooth: SMP: Fix not generating mackey and ltk when repairingLuiz Augusto von Dentz1-24/+7
2025-12-07Bluetooth: hci_sock: Prevent race in socket write iter and sock bindEdward Adam Davis1-0/+2
2025-12-07Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOPLuiz Augusto von Dentz1-4/+12
2025-11-24Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_completePauli Virtanen1-11/+15
2025-11-24Bluetooth: MGMT: Fix possible UAFsLuiz Augusto von Dentz3-77/+231
2025-11-24Bluetooth: L2CAP: export l2cap_chan_hold for modulesPauli Virtanen1-0/+1
2025-11-24Bluetooth: 6lowpan: Don't hold spin lock over sleeping functionsPauli Virtanen1-25/+43
2025-11-24Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusionPauli Virtanen1-4/+24
2025-11-24Bluetooth: 6lowpan: reset link-local header on ipv6 recv pathPauli Virtanen1-0/+1
2025-11-24Bluetooth: MGMT: cancel mesh send timer when hdev removedPauli Virtanen1-0/+1
2025-11-13Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()Ilia Gavrilov1-3/+3
2025-11-13Bluetooth: hci_event: validate skb length for unknown CC opcodeRaphael Pinsonneault-Thibeault1-0/+7
2025-11-13Bluetooth: SCO: Fix UAF on sco_conn_freeLuiz Augusto von Dentz1-0/+7
2025-11-13Bluetooth: hci_core: Fix tracking of periodic advertisementLuiz Augusto von Dentz2-4/+7