Hello: This series was applied to bluetooth/bluetooth-next.git (master) by Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>: On Tue, 13 Feb 2024 16:31:21 -0500 you wrote: > From: Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> > > This fixes the UAF on __hci_acl_create_connection_sync caused by > connection abortion, it uses the same logic as to LE_LINK which uses > hci_cmd_sync_cancel to prevent the callback to run if the connection is > abort prematurely. > > [...] Here is the summary with links: - [v2,1/3] Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync https://git.kernel.org/bluetooth/bluetooth-next/c/f36e87456bf6 - [v2,2/3] Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue https://git.kernel.org/bluetooth/bluetooth-next/c/4a8a8f446ef2 - [v2,3/3] Bluetooth: hci_sync: Attempt to dequeue connection attempt https://git.kernel.org/bluetooth/bluetooth-next/c/96fb2aab16bf You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html