[GIT PULL] bluetooth 2025-06-23

The following changes since commit e0fca6f2cebff539e9317a15a37dcf432e3b851a:

  net: mana: Record doorbell physical address in PF mode (2025-06-19 15:55:22 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git tags/for-net-2025-06-23

for you to fetch changes up to 1d6123102e9fbedc8d25bf4731da6d513173e49e:

  Bluetooth: hci_core: Fix use-after-free in vhci_flush() (2025-06-23 10:59:29 -0400)

----------------------------------------------------------------
bluetooth pull request for net:

 - L2CAP: Fix L2CAP MTU negotiation
 - hci_core: Fix use-after-free in vhci_flush()
 - btintel_pcie: Fix potential race condition in firmware download
 - hci_qca: fix unable to load the BT driver

----------------------------------------------------------------
Frédéric Danis (1):
      Bluetooth: L2CAP: Fix L2CAP MTU negotiation

Kiran K (1):
      Bluetooth: btintel_pcie: Fix potential race condition in firmware download

Kuniyuki Iwashima (1):
      Bluetooth: hci_core: Fix use-after-free in vhci_flush()

Shuai Zhang (1):
      driver: bluetooth: hci_qca:fix unable to load the BT driver

 drivers/bluetooth/btintel_pcie.c | 33 +++++++++++++++++++++++++++++++--
 drivers/bluetooth/hci_qca.c      | 13 ++++++++++---
 include/net/bluetooth/hci_core.h |  2 ++
 net/bluetooth/hci_core.c         | 34 ++++++++++++++++++++++++++++++----
 net/bluetooth/l2cap_core.c       |  9 ++++++++-
 5 files changed, 81 insertions(+), 10 deletions(-)