Luiz Augusto von Dentz 15efa7d00f Bluetooth: L2CAP: Fix not checking l2cap_chan security level ...

[ Upstream commit 7af8479d9e ]

l2cap_check_enc_key_size shall check the security level of the
l2cap_chan rather than the hci_conn since for incoming connection
request that may be different as hci_conn may already been
encrypted using a different security level.

Fixes: 522e9ed157 ("Bluetooth: l2cap: Check encryption key size on incoming connection")
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-06-04 14:40:19 +02:00

..

bnep

Bluetooth: bnep: fix wild-memory-access in proto_unregister

2024-11-01 01:56:01 +01:00

cmtp

…

hidp

…

rfcomm

Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"

2025-03-28 21:58:49 +01:00

6lowpan.c

Bluetooth: Fix error code in chan_alloc_skb_cb()

2025-03-28 21:59:00 +01:00

a2mp.c

…

a2mp.h

…

af_bluetooth.c

Revert "Bluetooth: af_bluetooth: Fix deadlock"

2024-11-17 15:07:19 +01:00

amp.c

…

amp.h

…

aosp.c

…

aosp.h

…

ecdh_helper.c

…

ecdh_helper.h

…

eir.c

Bluetooth: Fix eir name length

2024-03-26 18:20:42 -04:00

eir.h

…

hci_codec.c

…

hci_codec.h

…

hci_conn.c

Revert "Bluetooth: hci_conn: Consolidate code for aborting connections"

2024-11-17 15:07:19 +01:00

hci_core.c

Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"

2025-03-28 21:58:49 +01:00

hci_debugfs.c

Bluetooth: Fix TOCTOU in HCI debugfs implementation

2024-04-10 16:28:24 +02:00

hci_debugfs.h

…

hci_event.c

Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address

2025-04-25 10:43:48 +02:00

hci_request.c

Bluetooth: Fix memory leak in hci_req_sync_complete()

2024-04-17 11:18:22 +02:00

hci_request.h

Bluetooth: Delete unused hci_req_prepare_suspend() declaration

2023-10-10 22:00:40 +02:00

hci_sock.c

Bluetooth: hci_sock: Fix not validating setsockopt user input

2024-10-17 15:21:33 +02:00

hci_sync.c

Bluetooth: hci_sync: Fix not setting Random Address when required

2025-01-17 13:34:39 +01:00

hci_sysfs.c

Bluetooth: fix use-after-free in device_for_each_child()

2024-12-14 19:53:34 +01:00

iso.c

Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"

2025-03-28 21:58:49 +01:00

Kconfig

…

l2cap_core.c

Bluetooth: L2CAP: Fix not checking l2cap_chan security level

2025-06-04 14:40:19 +02:00

l2cap_sock.c

Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection

2025-02-21 13:49:40 +01:00

leds.c

…

leds.h

…

lib.c

…

Makefile

…

mgmt_config.c

…

mgmt_config.h

…

mgmt_util.c

…

mgmt_util.h

…

mgmt.c

Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()

2025-03-13 12:53:14 +01:00

msft.c

Bluetooth: msft: fix slab-use-after-free in msft_do_close()

2024-05-17 11:56:11 +02:00

msft.h

Bluetooth: msft: fix slab-use-after-free in msft_do_close()

2024-05-17 11:56:11 +02:00

sco.c

Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"

2025-03-28 21:58:49 +01:00

selftest.c

…

selftest.h

…

smp.c

Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"

2024-09-12 11:10:17 +02:00

smp.h

…