Here is third version of the fix for skb handling in net/bluetooth/mgmt.c First patch is fixing the skb allocation which theoretically might push skb tail beyond its end. Second patch simplifies operations on eir while using skb. Patches adds two helper functions to eir.h to align to the goal of eliminating the necessity of intermediary buffers, which can be achieved with additional changes done in this spirit. v2->v3: - fixed author email v1->v2: - fix mgmt_device_connected() - add eir_skb_put_data() - function for skb handing with eir Radoslaw Biernacki (2): Bluetooth: Fix skb allocation in mgmt_remote_name() & mgmt_device_connected() Bluetooth: Improve skb handling in mgmt_device_connected() net/bluetooth/eir.h | 20 ++++++++++++++++++++ net/bluetooth/mgmt.c | 43 ++++++++++++++++--------------------------- 2 files changed, 36 insertions(+), 27 deletions(-) -- 2.35.0.rc2.247.g8bbb082509-goog