linux-bluetooth Weekly Report - Week 30
Total messages: 337 (240 human, 97 CI/bot)
linux-bluetooth Weekly Report - Week 25
21 June 2026
Total messages: 182 (121 human, 61 CI/bot)
Note: Of the 182 messages, 121 are human-generated, 61 are CI/bot (bluez.test.bot: 28, patchwork-bot+bluetooth: 11, bugzilla-daemon: 9, BluezTestBot: 8, prathibhamadugonde: 2, kernel test robot: 1, github-actions[bot]: 1, syzbot: 1).
Summary
This week saw active discussions around kernel and BlueZ patches, with significant contributions from independent developers and corporate contributors such as Intel, Qualcomm, MediaTek, and Collabora. Key topics included support for new hardware, bug fixes, and enhancements to Bluetooth subsystems. Several patches were applied to bluetooth-next and BlueZ master, addressing issues like buffer overflows, null pointer dereferences, and out-of-bounds reads.
Key Patch Series & Discussions
Kernel Patches
| Topic | From | Affiliation | Patches | Status/Notes |
|---|---|---|---|---|
| Add PCIe M.2 Key E connector support for NXP i.MX boards | Sherry Sun | Independent | 8 | Active discussion (13 messages) |
| Bluetooth: btmtk: Add MT7928 support | Chris Lu | MediaTek | 1 | Active discussion (8 messages) |
| Bluetooth: btmtksdio: teardown fixes | Sergey Senozhatsky | Independent | 3 | Active discussion (8 messages, v2) |
| Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() | Siwei Zhang | Independent | 2 | Active discussion (6 messages, v5) |
| Initial Channel Sounding Support for | Naga Bhavani Akella | Qualcomm | 3 | Active discussion (5 messages, v4) |
BlueZ Userspace Patches
| Topic | From | Affiliation | Patches | Status/Notes |
|---|---|---|---|---|
| audio: harden A2DP parser handling | Geraldo Netto | Independent | 2 | Active discussion (3 messages) |
| shared/gatt: Fix gatt-db buffer overflow for cloned db | Frédéric Danis | Collabora | 1 | Applied to BlueZ master |
| shared/rap: Fix Mode 0 step serialization | Prathibha Madugonde | Qualcomm | 1 | Applied to BlueZ master |
| hci-tester: Work-around possible string overflow | Bastien Nocera | Red Hat | 1 | Applied to BlueZ master |
| src: Remove dead assignments in batocomp | Arnav Kapoor | Independent | 1 | Applied to BlueZ master |
Discussions & Bug Reports
| Topic | From | Notes |
|---|---|---|
| Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete | Samuel Page | Fix for use-after-free issue |
| Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() | Maoyi Xie | Addressed firmware read vulnerability |
| Bluetooth: simplify force_no_mitm_write() with kstrtobool_from_user() | Dmitry Antipov | Code simplification |
| Bluetooth: L2CAP: validate option length before reading conf opt value | Muhammad Bilal | Validation for option length in L2CAP |
| RTL8852BE (0bda:b853) Bluetooth initialization fails with -16 on ThinkBook 14+ | Misha | Hardware initialization issue |
Top Contributors (by message count)
| Contributor | Affiliation | Messages |
|---|---|---|
| Sergey Senozhatsky | Independent | 13 |
| Sherry Sun | Independent | 9 |
| Siwei Zhang | Independent | 8 |
| Luiz Augusto von Dentz | Intel | 7 |
| Geraldo Netto | Independent | 7 |
Merged to master (BlueZ & bluetooth-next)
Applied to bluetooth-next (kernel, via patchwork notifications)
- Bluetooth: btusb: Add new VID/PID 0x0489/0xe156 for MT7902
- Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled
- Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev
- Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete
Pushed to bluez/bluez master
- ci: add CheckKernelLLVM
- shared/bap: Transition ASE to QoS Configured on CIS loss
- audio: harden a2dp parsers
- shared: harden btsnoop trace parsing
- src: Remove dead assignments in batocomp
Company Focus Areas
Intel
- Luiz Augusto von Dentz contributed patches for 6lowpan fixes and other improvements.
- Chandrashekar Devegowda worked on adding a reset_type parameter to the hdev->reset() callback.
Qualcomm
- Naga Bhavani Akella contributed patches for initial channel sounding support.
- Prathibha Madugonde and Loic Poulain worked on various BlueZ userspace improvements.
MediaTek
- Chris Lu contributed patches for MT7928 Bluetooth support.
Collabora
- Frédéric Danis focused on fixing gatt-db buffer overflow issues and adding management security level events.
Red Hat
- Bastien Nocera contributed a patch to address string overflow issues in hci-tester.
Independent Contributors
- Sergey Senozhatsky was the top contributor, focusing on btmtksdio teardown fixes.
- Geraldo Netto contributed patches to harden A2DP parser handling and btsnoop trace parsing.
Notable Trends
- Increased activity around hardware support, including MT7928 and NXP i.MX boards.
- Focus on security fixes, including buffer overflows, null pointer dereferences, and out-of-bounds reads.
- Collaboration across companies like Intel, Qualcomm, MediaTek, and Collabora, showcasing a strong community effort.
- Continued improvements to BlueZ userspace components, including gatt-db, A2DP parsers, and btsnoop trace parsing.
- Active iteration of patch series, with multiple versions submitted for review and refinement.
- Ongoing work to improve Bluetooth management and connection handling, including fixes for UAF and connection abort issues.
- Contributions from independent developers remain a significant part of the community’s activity.