Catcrafts/milos-linux
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
milos-linux/net/bluetooth
History
Exact
Luiz Augusto von Dentz 149324fc76 Bluetooth: MGMT: Fix backward compatibility with userspace 
bluetoothd has a bug with makes it send extra bytes as part of
MGMT_OP_ADD_EXT_ADV_DATA which are now being checked to be the
exact the expected length, relax this so only when the expected
length is greater than the data length to cause an error since
that would result in accessing invalid memory, otherwise just
ignore the extra bytes.

Link: https://lore.kernel.org/linux-bluetooth/20260602204749.210857-1-luiz.dentz@gmail.com/T/#u
Fixes: d3f7d17960 ("Bluetooth: MGMT: validate Add Extended Advertising Data length")
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
2026-06-03 11:24:12 -04:00
..
bnep Bluetooth: bnep: reject short frames before parsing 2026-06-03 11:22:10 -04:00
hidp Bluetooth: HIDP: fix missing length checks in hidp_input_report() 2026-05-27 16:44:02 -04:00
rfcomm Bluetooth: RFCOMM: validate skb length in MCC handlers 2026-06-03 11:21:03 -04:00
6lowpan.c Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() 2026-05-27 16:44:02 -04:00
af_bluetooth.c Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() 2026-05-20 16:35:47 -04:00
aosp.c Bluetooth: aosp: Fix typo in comment 2025-07-23 10:30:18 -04:00
aosp.h
coredump.c Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv 2025-07-23 10:33:57 -04:00
ecdh_helper.c
ecdh_helper.h
eir.c Bluetooth: eir: Fix possible crashes on eir_create_adv_data 2025-06-11 16:29:22 -04:00
eir.h Bluetooth: eir: Fix possible crashes on eir_create_adv_data 2025-06-11 16:29:22 -04:00
hci_codec.c
hci_codec.h
hci_conn.c Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() 2026-05-27 16:44:01 -04:00
hci_core.c Bluetooth: hci_core: Rework hci_dev_do_reset() to use hci_sync functions 2026-05-28 08:52:21 -04:00
hci_debugfs.c Bluetooth: hci_dev: replace 'quirks' integer by 'quirk_flags' bitmap 2025-07-16 15:37:53 -04:00
hci_debugfs.h
hci_drv.c Bluetooth: Introduce HCI Driver protocol 2025-05-21 10:28:07 -04:00
hci_event.c Bluetooth: hci_event: fix memset typo 2026-05-06 16:27:29 -04:00
hci_sock.c Bluetooth: purge error queues in socket destructors 2026-02-23 15:30:16 -05:00
hci_sync.c Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend 2026-06-03 11:21:48 -04:00
hci_sysfs.c Bluetooth: fix memory leak in error path of hci_alloc_dev() 2026-06-03 11:22:28 -04:00
iso.c Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls 2026-06-03 11:23:30 -04:00
Kconfig net: remove ISDN subsystem and Bluetooth CMTP 2026-04-23 10:24:02 -07:00
l2cap_core.c Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig 2026-06-03 11:21:24 -04:00
l2cap_sock.c Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() 2026-05-27 16:44:01 -04:00
leds.c
leds.h
lib.c Bluetooth: Fix typos in comments 2025-07-23 10:30:48 -04:00
Makefile net: remove ISDN subsystem and Bluetooth CMTP 2026-04-23 10:24:02 -07:00
mgmt.c Bluetooth: MGMT: Fix backward compatibility with userspace 2026-06-03 11:24:12 -04:00
mgmt_config.c Bluetooth: mgmt: Add idle_timeout to configurable system parameters 2026-01-29 13:24:22 -05:00
mgmt_config.h
mgmt_util.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
mgmt_util.h Bluetooth: MGMT: Fix possible UAFs 2025-09-22 10:30:00 -04:00
msft.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
msft.h
sco.c Bluetooth: SCO: Fix data-race on sco_pi fields in sco_connect 2026-06-03 11:23:52 -04:00
selftest.c
selftest.h
smp.c Bluetooth: SMP: derive legacy responder STK authentication from MITM state 2026-04-01 16:48:06 -04:00
smp.h Bluetooth: SMP: If an unallowed command is received consider it a failure 2025-07-16 15:33:30 -04:00