Luiz Augusto von Dentz ec91078e13 Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ ...

[ Upstream commit 138d7eca44 ]

This adds a check for encryption key size upon receiving
L2CAP_LE_CONN_REQ which is required by L2CAP/LE/CFC/BV-15-C which
expects L2CAP_CR_LE_BAD_KEY_SIZE.

Link: https://lore.kernel.org/linux-bluetooth/5782243.rdbgypaU67@n9w6sw14/
Fixes: 27e2d4c8d2 ("Bluetooth: Add basic LE L2CAP connect request receiving support")
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Tested-by: Christian Eggers <ceggers@arri.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-03-04 07:21:33 -05:00

..

bnep

…

cmtp

…

hidp

…

rfcomm

tty: introduce and use tty_port_tty_vhangup() helper

2026-01-08 10:14:56 +01:00

6lowpan.c

Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions

2025-11-24 10:35:50 +01:00

af_bluetooth.c

…

aosp.c

…

aosp.h

…

coredump.c

…

ecdh_helper.c

…

ecdh_helper.h

…

eir.c

…

eir.h

…

hci_codec.c

…

hci_codec.h

…

hci_conn.c

Bluetooth: hci_conn: use mod_delayed_work for active mode timeout

2026-03-04 07:21:17 -05:00

hci_core.c

Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP

2025-12-07 06:24:54 +09:00

hci_debugfs.c

…

hci_debugfs.h

…

hci_event.c

Bluetooth: hci_event: validate skb length for unknown CC opcode

2025-11-13 15:34:36 -05:00

hci_sock.c

Bluetooth: hci_sock: Prevent race in socket write iter and sock bind

2025-12-07 06:24:54 +09:00

hci_sync.c

Bluetooth: hci_conn: Set link_policy on incoming ACL connections

2026-03-04 07:21:16 -05:00

hci_sysfs.c

…

iso.c

Bluetooth: ISO: Fix another instance of dst_type handling

2025-11-13 15:33:58 -05:00

Kconfig

…

l2cap_core.c

Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ

2026-03-04 07:21:33 -05:00

l2cap_sock.c

Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAP_ECRED_CONN_REQ

2026-03-04 07:21:33 -05:00

leds.c

…

leds.h

…

lib.c

…

Makefile

…

mgmt_config.c

…

mgmt_config.h

…

mgmt_util.c

Bluetooth: MGMT: Fix possible UAFs

2025-11-24 10:35:56 +01:00

mgmt_util.h

Bluetooth: MGMT: Fix possible UAFs

2025-11-24 10:35:56 +01:00

mgmt.c

Bluetooth: MGMT: Fix memory leak in set_ssp_complete

2026-02-06 16:55:40 +01:00

msft.c

…

msft.h

…

sco.c

Bluetooth: SCO: Fix UAF on sco_conn_free

2025-11-13 15:34:31 -05:00

selftest.c

…

selftest.h

…

smp.c

Bluetooth: SMP: Fix not generating mackey and ltk when repairing

2025-12-07 06:24:54 +09:00

smp.h

Bluetooth: SMP: If an unallowed command is received consider it a failure

2025-07-24 08:56:33 +02:00