linux-bluetooth Weekly Report - Week 29
Total messages: 366 (267 human, 99 CI/bot)
linux-bluetooth Weekly Report - Week 30
26 July 2026
Total messages: 337 (240 human, 97 CI/bot)
Note: Of the 337 messages, 240 are human-generated, 97 are CI/bot (bluez.test.bot: 58, patchwork-bot+bluetooth: 20, BluezTestBot: 10, github-actions[bot]: 2, syzbot: 2, bugzilla-daemon: 2, patchwork-bot+netdevbpf: 1, prathibhamadugonde: 1, kernel test robot: 1).
Summary
This week saw active contributions across kernel and BlueZ userspace development, with 337 messages exchanged. Key highlights include patches for vendor HCI frame support, fixes for multiple use-after-free (UAF) issues, and enhancements to Bluetooth SCO handling. Contributions from Intel, Qualcomm, and independent developers dominated discussions, reflecting ongoing collaboration and technical advancements.
Key Patch Series & Discussions
Kernel Patches
| Topic | From | Affiliation | Patches | Status/Notes |
|---|---|---|---|---|
| Add support for Shorter Connection Interval (SCI) | Luiz Augusto von Dentz | Intel | 12 | Active discussion |
| Bluetooth: ISO: fix HUP on socket release/shutdown + UAF/locking fixes | Pauli Virtanen | Independent | 11 | Active discussion |
| Bluetooth: Miscellaneous fixes and cleanups | Zijun Hu | Qualcomm | 11 | Active discussion |
| Bluetooth: qca: add QCC2072 support | Rahul Samana | Qualcomm | 3 | Active discussion |
| Bluetooth: Replace HCI_VENDOR_PKT usages with HCI_EV_VENDOR | Zijun Hu | Qualcomm | 3 | Active discussion |
BlueZ Userspace Patches
| Topic | From | Affiliation | Patches | Status/Notes |
|---|---|---|---|---|
| BlueZ: Add generic support for vendor HCI frames | Zijun Hu | Qualcomm | 3 | Active discussion |
| Hide WakeAllowed when the adapter cannot wake the host | Matthew Schwartz | Independent | 3 | Active discussion |
| input: HID gamepad quirk system for broken SDP records | Pakrohk | Independent | 0 | Active discussion |
| Bluetooth: SCO: fix sco_conn double free on outgoing connect | Baul Lee | Independent | 0 | Active discussion |
| Bluetooth: SCO: give the socket its own sco_conn reference | Aldo Ariel Panzardo | Independent | 0 | Active discussion |
Discussions & Bug Reports
| Topic | From | Notes |
|---|---|---|
| Bluetooth: Fix parent socket UAF in accept queues | Ren Wei | Addressing UAF issues |
| Intel AX200 Bluetooth firmware download failure | Bug Report | Firmware issue reported |
| Patch for stack buffer overflow and heap OOB read in avrcp.c | Nathan Auvray | Security patch proposed |
Top Contributors (by message count)
| Contributor | Affiliation | Messages |
|---|---|---|
| Luiz Augusto von Dentz | Intel | 39 |
| Pauli Virtanen | Independent | 37 |
| Zijun Hu | Qualcomm | 33 |
| Loic Poulain | Qualcomm | 15 |
| Dmitry Baryshkov | Qualcomm | 8 |
Merged to master (BlueZ & bluetooth-next)
Applied to bluetooth-next (kernel, via patchwork notifications)
- Bluetooth: hci_sync: Protect UUID list traversal
- Bluetooth: RFCOMM: Fix session UAF in set_termios
- Bluetooth: btusb: validate Realtek vendor event length
Pushed to bluez/bluez master
- tools/iso-tester: fix GIOChannel refcounting
- adapter: restrict delta=0 RSSI to proximity filters
- sdpd-request: Fix unchecked malloc
Company Focus Areas
Intel
- Vendor-specific HCI frame support.
- Enhancements to PCI sysfs for Bluetooth devices.
Qualcomm
- Support for QCC2072 and QCA2066 Bluetooth hardware.
- Fixes for vendor-specific HCI packet handling.
Independent Contributors
- Security patches for buffer overflows.
- Fixes for UAF issues across multiple subsystems.
Notable Trends
- Increased focus on addressing use-after-free (UAF) vulnerabilities in Bluetooth subsystems.
- Vendor-specific enhancements for HCI frame handling.
- Security patches targeting buffer overflow and out-of-bounds reads.
- Collaboration between Qualcomm and Intel on hardware-specific Bluetooth improvements.
- Active contributions from independent developers on bug fixes and feature enhancements.
- Expansion of Bluetooth support for new hardware platforms.
- Refinements to Bluetooth SCO and ISO handling mechanisms.