Hello: This series was applied to bluetooth/bluetooth-next.git (master) by Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>: On Tue, 22 Oct 2024 16:34:20 -0400 you wrote: > From: Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> > > conn->sk maybe have been unlinked/freed while waiting for sco_conn_lock > so this checks if the conn->sk is still valid by checking if it part of > sco_sk_list. > > Reported-by: syzbot+4c0d0c4cde787116d465@xxxxxxxxxxxxxxxxxxxxxxxxx > Tested-by: syzbot+4c0d0c4cde787116d465@xxxxxxxxxxxxxxxxxxxxxxxxx > Closes: https://syzkaller.appspot.com/bug?extid=4c0d0c4cde787116d465 > Fixes: ba316be1b6a0 ("Bluetooth: schedule SCO timeouts with delayed_work") > Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> > > [...] Here is the summary with links: - [v2,1/2] Bluetooth: SCO: Fix UAF on sco_sock_timeout https://git.kernel.org/bluetooth/bluetooth-next/c/300b75192c4d - [v2,2/2] Bluetooth: ISO: Fix UAF on iso_sock_timeout https://git.kernel.org/bluetooth/bluetooth-next/c/fb4560832d4c You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html