Hello: This patch was applied to bluetooth/bluetooth-next.git (master) by Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>: On Wed, 22 Jan 2025 16:25:14 -0500 you wrote: > From: Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> > > After the hci sync command releases l2cap_conn, the hci receive data work > queue references the released l2cap_conn when sending to the upper layer. > Add hci dev lock to the hci receive data work queue to synchronize the two. > > [1] > BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x187/0x8d0 net/bluetooth/l2cap_core.c:954 > Read of size 8 at addr ffff8880271a4000 by task kworker/u9:2/5837 > > [...] Here is the summary with links: - [v6] Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd https://git.kernel.org/bluetooth/bluetooth-next/c/6ab54a717189 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html