Hello: This patch was applied to bluetooth/bluetooth-next.git (master) by Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>: On Thu, 21 Jul 2022 09:10:50 -0700 you wrote: > From: Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> > > This fixes the following trace which is caused by hci_rx_work starting up > *after* the final channel reference has been put() during sock_close() but > *before* the references to the channel have been destroyed, so instead > the code now rely on kref_get_unless_zero/l2cap_chan_hold_unless_zero to > prevent referencing a channel that is about to be destroyed. > > [...] Here is the summary with links: - [v2] Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put https://git.kernel.org/bluetooth/bluetooth-next/c/d0be8347c623 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html