Patch Series

Subject Bluetooth: hci_sync: fix TOCTOU UAF in cmd_sync callbacks
Author michael.bommarito@gmail.com
Date 2026-05-11 14:34:01 +0000 UTC
Version
Cc git@aaronesau.com linux-bluetooth@vger.kernel.org linux-kernel@vger.kernel.org luiz.dentz@gmail.com marcel@holtmann.org martineau@kernel.org michael.bommarito@gmail.com netdev@vger.kernel.org pav@iki.fi stable@vger.kernel.org verdre@v0yd.nl

Patches (4)

Name Content [All]
[PATCH 1/4] Bluetooth: hci_sync: pin conn across hci_le_create_conn_sync [Body]
[PATCH 2/4] Bluetooth: hci_sync: pin conn across hci_le_pa_create_sync [Body]
[PATCH 3/4] Bluetooth: hci_sync: pin conn across hci_le_big_create_sync [Body]
[PATCH 4/4] Bluetooth: hci_sync: pin conn across hci_acl_create_conn_sync [Body]
Session 2026-05-11
ID (for dev) 759e9fe5-6823-4c09-bc0c-3d09fe4b5499
Status finished
Triaged OK [Log]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 63751099502d10f0aa6bb35273e56c5800cc4e3a [Config] passed [Log]
[KASAN] Boot test: Base 63751099502d10f0aa6bb35273e56c5800cc4e3a [Config] passed [Log]
[KASAN] Build Patched 63751099502d10f0aa6bb35273e56c5800cc4e3a [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 63751099502d10f0aa6bb35273e56c5800cc4e3a [Config] [patched] passed [Log]
[KASAN] Fuzz 63751099502d10f0aa6bb35273e56c5800cc4e3a [Config] 63751099502d10f0aa6bb35273e56c5800cc4e3a [Config] [patched] passed [Log] [Artifacts]