The following changes since commit e0fca6f2cebff539e9317a15a37dcf432e3b851a: net: mana: Record doorbell physical address in PF mode (2025-06-19 15:55:22 -0700) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git tags/for-net-2025-06-23 for you to fetch changes up to 1d6123102e9fbedc8d25bf4731da6d513173e49e: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (2025-06-23 10:59:29 -0400) ---------------------------------------------------------------- bluetooth pull request for net: - L2CAP: Fix L2CAP MTU negotiation - hci_core: Fix use-after-free in vhci_flush() - btintel_pcie: Fix potential race condition in firmware download - hci_qca: fix unable to load the BT driver ---------------------------------------------------------------- Frédéric Danis (1): Bluetooth: L2CAP: Fix L2CAP MTU negotiation Kiran K (1): Bluetooth: btintel_pcie: Fix potential race condition in firmware download Kuniyuki Iwashima (1): Bluetooth: hci_core: Fix use-after-free in vhci_flush() Shuai Zhang (1): driver: bluetooth: hci_qca:fix unable to load the BT driver drivers/bluetooth/btintel_pcie.c | 33 +++++++++++++++++++++++++++++++-- drivers/bluetooth/hci_qca.c | 13 ++++++++++--- include/net/bluetooth/hci_core.h | 2 ++ net/bluetooth/hci_core.c | 34 ++++++++++++++++++++++++++++++---- net/bluetooth/l2cap_core.c | 9 ++++++++- 5 files changed, 81 insertions(+), 10 deletions(-)