From: Jakub Kicinski <kuba@kernel.org>
To: Luiz Augusto von Dentz <luiz.dentz@gmail.com>
Cc: davem@davemloft.net, linux-bluetooth@vger.kernel.org,
netdev@vger.kernel.org
Subject: Re: [GIT PULL] bluetooth 2026-06-10
Date: Thu, 11 Jun 2026 17:15:59 -0700 [thread overview]
Message-ID: <20260611171559.5219cce9@kernel.org> (raw)
In-Reply-To: <20260610180050.419401-1-luiz.dentz@gmail.com>
On Wed, 10 Jun 2026 14:00:50 -0400 Luiz Augusto von Dentz wrote:
> bluetooth pull request for net:
>
> - hci_core: Fix UAF in hci_unregister_dev()
> - hci_event: fix simultaneous discovery stuck in FINDING
> - hci: validate codec capability element length
> - eir: Fix stack OOB write when prepending the Flags AD
> - L2CAP: Fix UAF in channel timeout by holding conn ref
> - btusb: fix use-after-free on registration failure
> - btusb: fix use-after-free on marvell probe failure
> - btusb: fix wakeup source leak on probe failure
> - btusb: fix wakeup irq devres lifetime
> - btmtk: fix URB leak in alloc_mtk_intr_urb error path
> - vhci: validate devcoredump state before side effects
Missed the PR :( Sorry about that :(
*iif* you're still rebasing the tree - could you mend the fixes tag?
Commit: 13d7c52acbb8 ("Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref")
Fixes tag: Fixes: 75780ca4c6a8 ("Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()")
Has these problem(s):
- Target SHA1 does not exist
prev parent reply other threads:[~2026-06-12 0:16 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-06-10 18:00 [GIT PULL] bluetooth 2026-06-10 Luiz Augusto von Dentz
2026-06-12 0:15 ` Jakub Kicinski [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260611171559.5219cce9@kernel.org \
--to=kuba@kernel.org \
--cc=davem@davemloft.net \
--cc=linux-bluetooth@vger.kernel.org \
--cc=luiz.dentz@gmail.com \
--cc=netdev@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.