Re: [PATCH 0/1] Bluetooth: mgmt: fix pairing command UAF

Hello:

This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <[email protected]>:

On Tue, 21 Jul 2026 22:36:06 +0800 you wrote:
> From: Zihan Xi <[email protected]>
> 
> 
> Hi Linux kernel maintainers,
> 
> We found and validated a bug in net/bluetooth/mgmt.c. The bug is
> reachable by a privileged local user through the Bluetooth management
> interface when a Pair Device command races with pairing failure and
> cancellation paths. The fixed kernel was run with the reproducer for
> 420 seconds and then for 1200 seconds without the original KASAN
> use-after-free, list_debug BUG, or panic. The reproducer did not
> naturally finish before the timeout in those fixed-kernel runs.
> 
> [...]

Here is the summary with links:
  - [1/1] Bluetooth: mgmt: fix UAF in pair command cancellation
    https://git.kernel.org/bluetooth/bluetooth-next/c/300a6fb2d8b7

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html