android_kernel_motorola_sm6375/net/bluetooth
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Pauli Virtanen ea46a1d217 Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
[ Upstream commit 3b78f50918276ab28fb22eac9aa49401ac436a3b ]

Bluetooth 6lowpan.c netdev has header_ops, so it must set link-local
header for RX skb, otherwise things crash, eg. with AF_PACKET SOCK_RAW

Add missing skb_reset_mac_header() for uncompressed ipv6 RX path.

For the compressed one, it is done in lowpan_header_decompress().

Log: (BlueZ 6lowpan-tester Client Recv Raw - Success)
------
kernel BUG at net/core/skbuff.c:212!
Call Trace:
<IRQ>
...
packet_rcv (net/packet/af_packet.c:2152)
...
<TASK>
__local_bh_enable_ip (kernel/softirq.c:407)
netif_rx (net/core/dev.c:5648)
chan_recv_cb (net/bluetooth/6lowpan.c:294 net/bluetooth/6lowpan.c:359)
------

Fixes: 18722c2470 ("Bluetooth: Enable 6LoWPAN support for BT LE devices")
Reviewed-by: Paul Menzel <pmenzel@molgen.mpg.de>
Signed-off-by: Pauli Virtanen <pav@iki.fi>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-12-03 12:45:16 +01:00
..
bnep Bluetooth: bnep: fix wild-memory-access in proto_unregister 2024-11-08 16:20:50 +01:00
cmtp
hidp Bluetooth: Fix race condition in hidp_session_thread 2023-04-20 12:07:35 +02:00
rfcomm Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}() 2024-12-14 19:44:36 +01:00
6lowpan.c Bluetooth: 6lowpan: reset link-local header on ipv6 recv path 2025-12-03 12:45:16 +01:00
a2mp.c
a2mp.h
af_bluetooth.c Bluetooth: Remove debugfs directory on module init failure 2024-11-08 16:20:48 +01:00
amp.c
amp.h
ecdh_helper.c
ecdh_helper.h
hci_conn.c Bluetooth: Fix bogus check for re-auth no supported with non-ssp 2024-01-25 14:34:26 -08:00
hci_core.c Bluetooth: hci_core: Fix LE quote calculation 2024-09-04 13:14:59 +02:00
hci_debugfs.c Bluetooth: Fix TOCTOU in HCI debugfs implementation 2024-04-13 12:51:33 +02:00
hci_debugfs.h
hci_event.c Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced 2025-09-04 14:05:54 +02:00
hci_request.c Bluetooth: Fix memory leak in hci_req_sync_complete() 2024-05-02 16:18:28 +02:00
hci_request.h
hci_sock.c Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name 2023-10-25 11:53:25 +02:00
hci_sysfs.c Bluetooth: fix use-after-free in device_for_each_child() 2025-08-28 16:21:36 +02:00
Kconfig
l2cap_core.c Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU 2025-08-28 16:21:16 +02:00
l2cap_sock.c Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() 2025-09-09 18:43:57 +02:00
leds.c
leds.h
lib.c
Makefile
mgmt.c Bluetooth: MGMT: Add error handling to pair_device() 2024-09-04 13:15:01 +02:00
mgmt_util.c
mgmt_util.h
sco.c Bluetooth: SCO: Fix UAF on sco_conn_free 2025-12-03 12:45:14 +01:00
selftest.c
selftest.h
smp.c Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout 2025-08-28 16:21:16 +02:00
smp.h Bluetooth: SMP: If an unallowed command is received consider it a failure 2025-08-28 16:21:16 +02:00