Re: [PATCH v3 1/7] Bluetooth: hci_conn: hold conn reference in abort_conn_sync()

Hello:

This series was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <[email protected]>:

On Sun, 28 Jun 2026 15:12:32 +0300 you wrote:
> There is theoretical UAF if the conn is freed while the hci_sync task is
> running.
> 
> Hold refcount to avoid that.
> 
> Fixes: 227a0cdf4a02 ("Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT")
> Signed-off-by: Pauli Virtanen <[email protected]>
> 
> [...]

Here is the summary with links:
  - [v3,1/7] Bluetooth: hci_conn: hold conn reference in abort_conn_sync()
    https://git.kernel.org/bluetooth/bluetooth-next/c/3bf1394e8868
  - [v3,2/7] Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks
    https://git.kernel.org/bluetooth/bluetooth-next/c/69a694ebe97f
  - [v3,3/7] Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback
    (no matching commit)
  - [v3,4/7] Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback
    https://git.kernel.org/bluetooth/bluetooth-next/c/cddfec3618d0
  - [v3,5/7] Bluetooth: hci_sync: hold conn in hci_past_sync() callback
    https://git.kernel.org/bluetooth/bluetooth-next/c/3c5f5c6be878
  - [v3,6/7] Bluetooth: hci_sync: fix hci_conn_del() use in hci_le_create_conn_sync
    https://git.kernel.org/bluetooth/bluetooth-next/c/423e5fc465eb
  - [v3,7/7] Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync
    https://git.kernel.org/bluetooth/bluetooth-next/c/73b6871b261f

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html