Hello:
This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>:
On Wed, 27 Aug 2025 20:40:14 +0000 you wrote:
> syzbot reported the splat below without a repro.
>
> In the splat, a single thread calling bt_accept_dequeue() freed sk
> and touched it after that.
>
> The root cause would be the racy l2cap_sock_cleanup_listen() call
> added by the cited commit.
>
> [...]
Here is the summary with links:
- [v1] Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
https://git.kernel.org/bluetooth/bluetooth-next/c/02925b3b935e
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
