Pavel Shpakovskiy af181eb716 Bluetooth: hci_sync: fix set_local_name race condition ... [ Upstream commit 6bbd0d3f0c23fc53c17409dd7476f38ae0ff0cd9 ] Function set_name_sync() uses hdev->dev_name field to send HCI_OP_WRITE_LOCAL_NAME command, but copying from data to hdev->dev_name is called after mgmt cmd was queued, so it is possible that function set_name_sync() will read old name value. This change adds name as a parameter for function hci_update_name_sync() to avoid race condition. Fixes: 6f6ff38a1e ("Bluetooth: hci_sync: Convert MGMT_OP_SET_LOCAL_NAME") Signed-off-by: Pavel Shpakovskiy <pashpakovskii@salutedevices.com> Reviewed-by: Paul Menzel <pmenzel@molgen.mpg.de> Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2025-09-04 15:26:27 +02:00
..
6lowpan
9p	9p/net: fix improper handling of bogus negative read/write replies	2025-05-02 07:47:04 +02:00
802
8021q	net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime	2025-07-24 08:51:53 +02:00
appletalk	net: appletalk: Fix use-after-free in AARP proxy probe	2025-08-15 12:04:47 +02:00
atm	atm: clip: Fix NULL pointer dereference in vcc_sendmsg()	2025-07-17 18:32:06 +02:00
ax25	ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt	2025-02-21 13:49:56 +01:00
batman-adv	batman-adv: Ignore own maximum aggregation size during RX	2025-03-28 21:59:01 +01:00
bluetooth	Bluetooth: hci_sync: fix set_local_name race condition	2025-09-04 15:26:27 +02:00
bpf	bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()	2025-03-07 16:56:37 +01:00
bpfilter
bridge	net: bridge: fix soft lockup in br_multicast_query_expired()	2025-08-28 16:26:17 +02:00
caif	caif: reduce stack size, again	2025-08-15 12:04:56 +02:00
can	can: bcm: add missing rcu read protection for procfs content	2025-06-04 14:40:20 +02:00
ceph
core	net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM	2025-08-28 16:26:17 +02:00
dcb
dccp
devlink
dns_resolver
dsa	net: dsa: tag_brcm: legacy: fix pskb_may_pull length	2025-06-27 11:07:17 +01:00
ethernet
ethtool	net: ethtool: Don't call .cleanup_data when prepare_data fails	2025-04-25 10:43:25 +02:00
hsr	net, hsr: reject HSR frame if skb can't hold tag	2025-08-28 16:26:09 +02:00
ieee802154
ife
ipv4	net: ipv4: fix regression in local-broadcast routes	2025-09-04 15:26:26 +02:00
ipv6	netfilter: nf_reject: don't leak dst refcount for loopback packets	2025-08-28 16:26:19 +02:00
iucv
kcm
key
l2tp
l3mdev
lapb
llc	llc: fix data loss when reading from a socket in llc_ui_recvmsg()	2025-06-04 14:40:21 +02:00
mac80211	wifi: mac80211: check basic rates validity in sta_link_apply_parameters	2025-08-28 16:26:16 +02:00
mac802154
mctp	net: mctp: Prevent duplicate binds	2025-08-28 16:25:55 +02:00
mpls	mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().	2025-06-27 11:07:39 +01:00
mptcp	mptcp: disable add_addr retransmission when timeout is 0	2025-08-28 16:26:16 +02:00
ncsi	net: ncsi: Fix buffer overflow in fetching version id	2025-08-28 16:25:58 +02:00
netfilter	netfilter: ctnetlink: fix refcount leak on table dump	2025-08-28 16:25:51 +02:00
netlabel	calipso: unlock rcu before returning -EAFNOSUPPORT	2025-06-27 11:07:25 +01:00
netlink	netlink: avoid infinite retry looping in netlink_unicast()	2025-08-28 16:25:48 +02:00
netrom
nfc	NFC: nci: uart: Set tty->disc_data only in success path	2025-06-27 11:07:29 +01:00
nsh
openvswitch	net: openvswitch: Fix the dead loop of MPLS parse	2025-06-27 11:07:12 +01:00
packet	net/packet: fix a race in packet_set_ring() and packet_notifier()	2025-08-15 12:05:11 +02:00
phonet	phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()	2025-07-24 08:51:48 +02:00
psample
qrtr
rds
rfkill
rose	rose: fix dangling neighbour pointers in rose_rt_device_down()	2025-07-10 15:59:48 +02:00
rxrpc	rxrpc: Fix oops due to non-existence of prealloc backlog struct	2025-07-17 18:32:06 +02:00
sched	net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate	2025-08-28 16:26:18 +02:00
sctp	sctp: Do not wake readers in __sctp_write_space()	2025-06-27 11:07:33 +01:00
smc	net/smc: use the correct ndev to find pnetid by pnetid table	2025-06-04 14:40:06 +02:00
strparser	strparser: Add read_sock callback	2025-03-07 16:56:37 +01:00
sunrpc	SUNRPC: rpcbind should never reset the port to the value '0'	2025-06-04 14:40:03 +02:00
switchdev	net: switchdev: Convert blocking notification chain to a raw one	2025-03-28 21:58:49 +01:00
tipc	tipc: Fix use-after-free in tipc_conn_close().	2025-07-17 18:32:05 +02:00
tls	tls: fix handling of zero-length records on the rx_list	2025-08-28 16:26:16 +02:00
unix	af_unix: Don't set -ECONNRESET for consumed OOB skb.	2025-07-06 10:58:00 +02:00
vmw_vsock	vsock/virtio: Validate length in packet header before skb_put()	2025-08-28 16:26:07 +02:00
wireless	wifi: cfg80211: reject HTC bit for management frames	2025-08-28 16:25:55 +02:00
x25
xdp	xsk: fix an integer overflow in xp_create_and_assign_umem()	2025-03-28 21:59:01 +01:00
xfrm	xfrm: interface: fix use-after-free after changing collect_md xfrm interface	2025-08-15 12:04:46 +02:00
compat.c
devres.c
Kconfig
Kconfig.debug
Makefile	af_unix: Remove CONFIG_UNIX_SCM.	2025-06-04 14:40:23 +02:00
socket.c
sysctl_net.c