On Thu, Jan 10, 2019 at 07:29:17AM +0100, Greg Kroah-Hartman wrote: > The L2CAP_CONF_EFS and L2CAP_CONF_RFC messages can be sent from > userspace so their structure sizes need to be checked before parsing > them. > > Based on a patch from Ran Menscher. Ran, can you verify if these two patches solve the problems you reported or not? thanks, greg k-h