Siwei Zhang c88c185ae0 Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() ...

commit 2ff1a41a91 upstream.

Add the same NULL guard already present in
l2cap_sock_resume_cb() and l2cap_sock_ready_cb().

Fixes: 89bc500e41 ("Bluetooth: Add state tracking to struct l2cap_chan")
Cc: stable@kernel.org
Signed-off-by: Siwei Zhang <oss@fourdim.xyz>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2026-05-14 15:29:20 +02:00

..

bnep

…

cmtp

…

hidp

Bluetooth: HIDP: Fix possible UAF

2026-03-25 11:08:52 +01:00

rfcomm

tty: introduce and use tty_port_tty_vhangup() helper

2026-01-08 10:14:56 +01:00

6lowpan.c

Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions

2025-11-24 10:35:50 +01:00

af_bluetooth.c

…

aosp.c

…

aosp.h

…

coredump.c

…

ecdh_helper.c

…

ecdh_helper.h

…

eir.c

Bluetooth: eir: Fix possible crashes on eir_create_adv_data

2025-06-19 15:32:30 +02:00

eir.h

Bluetooth: eir: Fix possible crashes on eir_create_adv_data

2025-06-19 15:32:30 +02:00

hci_codec.c

…

hci_codec.h

…

hci_conn.c

Bluetooth: hci_sync: annotate data-races around hdev->req_status

2026-04-22 13:18:47 +02:00

hci_core.c

Bluetooth: hci_sync: annotate data-races around hdev->req_status

2026-04-22 13:18:47 +02:00

hci_debugfs.c

…

hci_debugfs.h

…

hci_event.c

Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt

2026-05-14 15:29:20 +02:00

hci_sock.c

Bluetooth: hci_sock: Prevent race in socket write iter and sock bind

2025-12-07 06:24:54 +09:00

hci_sync.c

Bluetooth: hci_sync: annotate data-races around hdev->req_status

2026-04-22 13:18:47 +02:00

hci_sysfs.c

…

iso.c

Bluetooth: ISO: Fix another instance of dst_type handling

2025-11-13 15:33:58 -05:00

Kconfig

…

l2cap_core.c

Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()

2026-05-14 15:29:18 +02:00

l2cap_sock.c

Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()

2026-05-14 15:29:20 +02:00

leds.c

…

leds.h

…

lib.c

…

Makefile

…

mgmt_config.c

…

mgmt_config.h

…

mgmt_util.c

Bluetooth: MGMT: Fix possible UAFs

2025-11-24 10:35:56 +01:00

mgmt_util.h

Bluetooth: MGMT: Fix possible UAFs

2025-11-24 10:35:56 +01:00

mgmt.c

Bluetooth: MGMT: validate mesh send advertising payload length

2026-04-11 14:24:36 +02:00

msft.c

…

msft.h

…

sco.c

Bluetooth: SCO: fix race conditions in sco_sock_connect()

2026-04-11 14:24:35 +02:00

selftest.c

…

selftest.h

…

smp.c

Bluetooth: SMP: force responder MITM requirements before building the pairing response

2026-04-11 14:24:40 +02:00

smp.h

Bluetooth: SMP: If an unallowed command is received consider it a failure

2025-07-24 08:56:33 +02:00