Re: [PATCH v5 0/7] Bluetooth: hci_conn: hold conn references in hci_sync tasks

Hello:

This series was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <[email protected]>:

On Sat, 25 Jul 2026 12:59:16 +0300 you wrote:
> Have hci_sync tasks hold reference to hci_conn pointer they want to use
> later.
> 
> Avoids UAFs and passing potentially reused (possible even if very
> unlikely) pointers to hci_conn_valid().
> 
> hci_conn_del() dequeues running works for the same connection, but this
> has no effect if the work is already started running, which is the race
> condition here.
> 
> [...]

Here is the summary with links:
  - [v5,1/7] Bluetooth: hci_conn: hold conn reference in abort_conn_sync()
    https://git.kernel.org/bluetooth/bluetooth-next/c/3bf1394e8868
  - [v5,2/7] Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks
    https://git.kernel.org/bluetooth/bluetooth-next/c/69a694ebe97f
  - [v5,3/7] Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback
    https://git.kernel.org/bluetooth/bluetooth-next/c/b1196afe58a9
  - [v5,4/7] Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback
    https://git.kernel.org/bluetooth/bluetooth-next/c/cddfec3618d0
  - [v5,5/7] Bluetooth: hci_sync: hold conn in hci_past_sync() callback
    https://git.kernel.org/bluetooth/bluetooth-next/c/3c5f5c6be878
  - [v5,6/7] Bluetooth: hci_sync: fix hci_conn_del() use in hci_le_create_conn_sync
    https://git.kernel.org/bluetooth/bluetooth-next/c/423e5fc465eb
  - [v5,7/7] Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync
    https://git.kernel.org/bluetooth/bluetooth-next/c/73b6871b261f

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html