Re: [PATCH] Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers
From: patchwork-bot+bluetooth
Date: Thu Mar 05 2026 - 22:33:29 EST
Hello:
This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>:
On Fri, 27 Feb 2026 11:03:39 +0000 you wrote:
> Commit 302a1f674c00 ("Bluetooth: MGMT: Fix possible UAFs") introduced
> mgmt_pending_valid(), which not only validates the pending command but
> also unlinks it from the pending list if it is valid. This change in
> semantics requires updates to several completion handlers to avoid list
> corruption and memory safety issues.
>
> This patch addresses two left-over issues from the aforementioned rework:
>
> [...]
Here is the summary with links:
- Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers
https://git.kernel.org/bluetooth/bluetooth-next/c/eaf573d74cd1
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html