Re: [PATCH v2] Bluetooth: SCO: fix race conditions in sco_sock_connect()

patchwork-bot+bluetooth
2026-03-26T21:40:18Z

Hello:

This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@intel.com>:

On Thu, 26 Mar 2026 23:16:45 +0800 you wrote:
> sco_sock_connect() checks sk_state and sk_type without holding
> the socket lock. Two concurrent connect() syscalls on the same
> socket can both pass the check and enter sco_connect(), leading
> to use-after-free.
>
> The buggy scenario involves three participants and was confirmed
> with additional logging instrumentation:
>
> [...]

Here is the summary with links:
- [v2] Bluetooth: SCO: fix race conditions in sco_sock_connect()
https://git.kernel.org/bluetooth/bluetooth-next/c/401702ac8a51

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.