The following changes since commit ba9169f57090efdee6b13601fced57e123db8777:
Merge branch 'misdn-fixes' (2022-11-02 12:34:48 +0000)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git tags/for-net-2022-10-02
for you to fetch changes up to b1a2cd50c0357f243b7435a732b4e62ba3157a2e:
Bluetooth: L2CAP: Fix attempting to access uninitialized memory (2022-11-02 16:37:00 -0700)
----------------------------------------------------------------
bluetooth pull request for net:
- Fix memory leak in hci_vhci driver
- Fix handling of skb on virtio_bt driver
- Fix accepting connection for invalid L2CAP PSM
- Fix attemting to access uninitialized memory
- Fix use-after-free in l2cap_reassemble_sdu
- Fix use-after-free in l2cap_conn_del
- Fix handling of destination address type for CIS
- Fix not restoring ISO buffer count on disconnect
----------------------------------------------------------------
Hawkins Jiawei (1):
Bluetooth: L2CAP: Fix memory leak in vhci_write
Luiz Augusto von Dentz (4):
Bluetooth: hci_conn: Fix not restoring ISO buffer count on disconnect
Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm
Bluetooth: L2CAP: Fix attempting to access uninitialized memory
Maxim Mikityanskiy (1):
Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
Pauli Virtanen (1):
Bluetooth: hci_conn: Fix CIS connection dst_type handling
Soenke Huster (1):
Bluetooth: virtio_bt: Use skb_put to set length
Zhengchao Shao (1):
Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
drivers/bluetooth/virtio_bt.c | 2 +-
net/bluetooth/hci_conn.c | 18 ++++++---
net/bluetooth/iso.c | 14 ++++++-
net/bluetooth/l2cap_core.c | 86 ++++++++++++++++++++++++++++++++++++-------
4 files changed, 98 insertions(+), 22 deletions(-)
