The following changes since commit 60b10121db602a43ada3dbc39792bbf93d25991b:
Bluetooth: MGMT: Fix discovery stuck after a failed Stop Discovery (2026-11-02 17:09:03 -0500)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth.git tags/for-net-2026-11-09
for you to fetch changes up to 1f2ac56137c51be0601e18a163d817e02a15913f:
Bluetooth: L2CAP: Keep recvmsg from resuming a closed channel (2026-11-09 17:04:21 -0500)
----------------------------------------------------------------
bluetooth pull request for net:
Core:
- hci_conn: Fix SCO/eSCO Transport_Unit_Size for HCI data path
- L2CAP: Only accept LE responses to outstanding requests
- L2CAP: Clear request identifiers on incoming LE connections
- L2CAP: Keep recvmsg from resuming a closed channel
- Fix not updating of hdev->commands[] after reset
- reject invalid LE supervision timeout relationships
Drivers:
- btusb: fix use-after-free in force_poll_sync
- hci_qca: fix use-after-free in ibs debugfs files
- qca: Disable SoC debug logging for WCN3950
----------------------------------------------------------------
Kyle Pepper (1):
Bluetooth: reject invalid LE supervision timeout relationships
Luiz Augusto von Dentz (1):
Bluetooth: Fix not updating of hdev->commands[] after reset
Stanislavs Nilovs (1):
Bluetooth: qca: Disable SoC debug logging for WCN3950
YuanZhe Liu (2):
Bluetooth: hci_qca: fix use-after-free in ibs debugfs files
Bluetooth: btusb: fix use-after-free in force_poll_sync
Zhao Li (3):
Bluetooth: L2CAP: Only accept LE responses to outstanding requests
Bluetooth: L2CAP: Clear request identifiers on incoming LE connections
Bluetooth: L2CAP: Keep recvmsg from resuming a closed channel
Zijun Hu (1):
Bluetooth: hci_conn: Fix SCO/eSCO Transport_Unit_Size for HCI data path
drivers/bluetooth/btqca.c | 1 +
drivers/bluetooth/btusb_main.c | 10 ++++-
drivers/bluetooth/hci_qca.c | 5 +++
include/net/bluetooth/hci_core.h | 13 ++----
include/net/bluetooth/l2cap.h | 1 +
net/bluetooth/hci_conn.c | 18 ++++++---
net/bluetooth/hci_event.c | 4 +-
net/bluetooth/l2cap_core.c | 87 ++++++++++++++++++++--------------------
net/bluetooth/l2cap_sock.c | 3 +-
9 files changed, 77 insertions(+), 65 deletions(-)