linux-yocto/net/bluetooth
Luiz Augusto von Dentz bd3051a816 Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
[ Upstream commit d24e4a7fed ]

Configuration request only configure the incoming direction of the peer
initiating the request, so using the MTU is the other direction shall
not be used, that said the spec allows the peer responding to adjust:

Bluetooth Core 6.1, Vol 3, Part A, Section 4.5

 'Each configuration parameter value (if any is present) in an
 L2CAP_CONFIGURATION_RSP packet reflects an ‘adjustment’ to a
 configuration parameter value that has been sent (or, in case of
 default values, implied) in the corresponding
 L2CAP_CONFIGURATION_REQ packet.'

That said adjusting the MTU in the response shall be limited to ERTM
channels only as for older modes the remote stack may not be able to
detect the adjustment causing it to silently drop packets.

Link: https://github.com/bluez/bluez/issues/1422
Link: https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/issues/149
Link: https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/4793
Fixes: 042bb9603c ("Bluetooth: L2CAP: Fix L2CAP MTU negotiation")
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-07-24 08:53:19 +02:00
..
bnep Bluetooth: bnep: fix wild-memory-access in proto_unregister 2024-11-01 01:58:24 +01:00
cmtp
hidp
rfcomm Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context" 2025-03-22 12:50:38 -07:00
6lowpan.c Bluetooth: Fix error code in chan_alloc_skb_cb() 2025-03-28 21:59:53 +01:00
af_bluetooth.c Bluetooth: SCO: Fix UAF on sco_sock_timeout 2024-11-01 01:58:30 +01:00
aosp.c
aosp.h
coredump.c
ecdh_helper.c
ecdh_helper.h
eir.c Bluetooth: Fix NULL pointer deference on eir_get_service_data 2025-06-19 15:28:42 +02:00
eir.h
hci_codec.c
hci_codec.h
hci_conn.c Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions 2025-01-09 13:31:43 +01:00
hci_core.c Bluetooth: hci_core: Fix use-after-free in vhci_flush() 2025-07-10 16:03:13 +02:00
hci_debugfs.c Bluetooth: Fix TOCTOU in HCI debugfs implementation 2024-04-10 16:35:49 +02:00
hci_debugfs.h
hci_event.c Bluetooth: HCI: Set extended advertising data synchronously 2025-07-17 18:35:11 +02:00
hci_request.c Bluetooth: Fix memory leak in hci_req_sync_complete() 2024-04-17 11:19:25 +02:00
hci_request.h
hci_sock.c Bluetooth: hci_sock: Fix not validating setsockopt user input 2024-10-10 11:57:19 +02:00
hci_sync.c Bluetooth: hci_sync: fix connectable extended advertising when using static random address 2025-07-24 08:53:18 +02:00
hci_sysfs.c Bluetooth: fix use-after-free in device_for_each_child() 2024-12-09 10:32:11 +01:00
iso.c Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context" 2025-03-22 12:50:38 -07:00
Kconfig
l2cap_core.c Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU 2025-07-24 08:53:19 +02:00
l2cap_sock.c Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() 2025-07-24 08:53:18 +02:00
leds.c
leds.h
lib.c
Makefile
mgmt_config.c
mgmt_config.h
mgmt_util.c Bluetooth: MGMT: Protect mgmt_pending list with its own lock 2025-06-19 15:28:38 +02:00
mgmt_util.h Bluetooth: MGMT: Protect mgmt_pending list with its own lock 2025-06-19 15:28:38 +02:00
mgmt.c Bluetooth: MGMT: mesh_send: check instances prior disabling advertising 2025-07-10 16:03:05 +02:00
msft.c Bluetooth: msft: fix slab-use-after-free in msft_do_close() 2024-05-17 12:02:21 +02:00
msft.h Bluetooth: msft: fix slab-use-after-free in msft_do_close() 2024-05-17 12:02:21 +02:00
sco.c Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context" 2025-03-22 12:50:38 -07:00
selftest.c
selftest.h
smp.c Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout 2025-07-24 08:53:18 +02:00
smp.h Bluetooth: SMP: If an unallowed command is received consider it a failure 2025-07-24 08:53:18 +02:00