The following changes since commit 3cae906e1a6184cdc9e4d260e4dbdf9a118d94ad: calipso: unlock rcu before returning -EAFNOSUPPORT (2025-06-05 08:03:38 -0700) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git tags/for-net-2025-06-05 for you to fetch changes up to 6fe26f694c824b8a4dbf50c635bee1302e3f099c: Bluetooth: MGMT: Protect mgmt_pending list with its own lock (2025-06-05 14:54:57 -0400) ---------------------------------------------------------------- bluetooth pull request for net: - MGMT: Fix UAF on mgmt_remove_adv_monitor_complete - MGMT: Protect mgmt_pending list with its own lock - hci_core: fix list_for_each_entry_rcu usage - btintel_pcie: Increase the tx and rx descriptor count - btintel_pcie: Reduce driver buffer posting to prevent race condition - btintel_pcie: Fix driver not posting maximum rx buffers ---------------------------------------------------------------- Chandrashekar Devegowda (2): Bluetooth: btintel_pcie: Increase the tx and rx descriptor count Bluetooth: btintel_pcie: Reduce driver buffer posting to prevent race condition Kiran K (1): Bluetooth: btintel_pcie: Fix driver not posting maximum rx buffers Luiz Augusto von Dentz (2): Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete Bluetooth: MGMT: Protect mgmt_pending list with its own lock Pauli Virtanen (1): Bluetooth: hci_core: fix list_for_each_entry_rcu usage drivers/bluetooth/btintel_pcie.c | 31 +++++---- drivers/bluetooth/btintel_pcie.h | 10 +-- include/net/bluetooth/hci_core.h | 2 +- net/bluetooth/hci_core.c | 16 ++--- net/bluetooth/mgmt.c | 138 +++++++++++++++++---------------------- net/bluetooth/mgmt_util.c | 32 +++++++-- net/bluetooth/mgmt_util.h | 4 +- 7 files changed, 118 insertions(+), 115 deletions(-)