bluetooth subsystem


List(s): linux-bluetooth@vger.kernel.org
Maintainer(s): luiz.dentz@gmail.com, marcel@holtmann.org
Fixed bugs: 118
Parent subsystem(s): kernel (89)
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
possible deadlock in rfcomm_process_sessions prio:low bluetooth 4 5 9d12h 20d
KASAN: slab-use-after-free Read in mesh_send_sync prio:normal bluetooth 19 syz 1 18d 28d PATCH [20d]
possible deadlock in l2cap_chan_connect (2) prio:high bluetooth 4 syz, C 499 19d 29d 💬 1 [28d]
possible deadlock in rfcomm_run prio:high bluetooth 4 17 5d02h 33d
KASAN: slab-use-after-free Read in l2cap_le_flowctl_send prio:high actionable bluetooth 19 1 42d 38d
KASAN: slab-use-after-free Read in hci_sent_cmd_data prio:high actionable bluetooth 19 1 90d 84d
kernel panic: kernel: panic_on_warn set ... (3) prio:high bluetooth 2 syz, C error 156 1d04h 87d 💬 1 [29d]
WARNING in hci_send_cmd (4) prio:high bluetooth -1 10 2h50m 192d 💬 1 [61d]
WARNING in l2cap_conn_start prio:low bluetooth -1 6 95d 237d
WARNING in hci_connect_sco prio:low bluetooth -1 syz, C 7 4d00h 314d PATCH [7d04h]
INFO: task hung in get_signal (2) prio:low bluetooth 1 syz 1 337d 333d
KASAN: slab-use-after-free Read in hci_uart_write_work bluetooth prio:high 19 syz error error 78 262d 478d 💬 3 [470d]
INFO: task hung in hci_dev_open (2) prio:low bluetooth 1 syz done inconclusive 12 6d09h 627d
WARNING in hci_conn_timeout (2) prio:low bluetooth -1 syz, C error 39091 1h24m 687d
KASAN: slab-use-after-free Read in bt_accept_unlink bluetooth 19 syz 250 64d 744d 💬 1 [61d]
KASAN: slab-use-after-free Read in l2cap_recv_frame prio:high bluetooth 19 syz, C inconclusive inconclusive 140 201d 921d 💬 2 [406d]
WARNING in l2cap_chan_del prio:high bluetooth -1 395 25d 962d
general protection fault in lock_sock_nested prio:high bluetooth 19 syz, C done done 4503 144d 1150d
INFO: task hung in synchronize_rcu (4) prio:high bluetooth 1 syz, C done error 5021 1d00h 1280d 💬 8 [29d]
WARNING in call_timer_fn bluetooth prio:high -1 syz, C unreliable 10046 10h49m 1449d 💬 8 [29d]
Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Discussions
BUG: unable to handle kernel NULL pointer dereference in __refill_objects_node bluetooth prio:high 10 1 7d16h 3d16h