The following changes since commit f2db7230f73a80dbb179deab78f88a7947f0ab7e: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (2024-05-02 19:02:46 -0700) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git tags/for-net-2024-05-03 for you to fetch changes up to 40d442f969fb1e871da6fca73d3f8aef1f888558: Bluetooth: qca: fix firmware check error path (2024-05-03 13:05:55 -0400) ---------------------------------------------------------------- bluetooth pull request for net: - mediatek: mt8183-pico6: Fix bluetooth node - sco: Fix use-after-free bugs caused by sco_sock_timeout - l2cap: fix null-ptr-deref in l2cap_chan_timeout - qca: Various fixes - l2cap: Fix slab-use-after-free in l2cap_connect() - msft: fix slab-use-after-free in msft_do_close() - HCI: Fix potential null-ptr-deref ---------------------------------------------------------------- Chen-Yu Tsai (1): arm64: dts: mediatek: mt8183-pico6: Fix bluetooth node Duoming Zhou (2): Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout Johan Hovold (7): Bluetooth: qca: fix wcn3991 device address check Bluetooth: qca: add missing firmware sanity checks Bluetooth: qca: fix NVM configuration parsing Bluetooth: qca: generalise device address check Bluetooth: qca: fix info leak when fetching fw build id Bluetooth: qca: fix info leak when fetching board id Bluetooth: qca: fix firmware check error path Sungwoo Kim (3): Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() Bluetooth: msft: fix slab-use-after-free in msft_do_close() Bluetooth: HCI: Fix potential null-ptr-deref .../dts/mediatek/mt8183-kukui-jacuzzi-pico6.dts | 3 +- drivers/bluetooth/btqca.c | 110 +++++++++++++++++---- drivers/bluetooth/btqca.h | 3 +- net/bluetooth/hci_core.c | 3 +- net/bluetooth/hci_event.c | 2 + net/bluetooth/l2cap_core.c | 24 ++--- net/bluetooth/msft.c | 2 +- net/bluetooth/msft.h | 4 +- net/bluetooth/sco.c | 4 + 9 files changed, 119 insertions(+), 36 deletions(-)