linux-bluetooth Weekly Report - Week 34

Total messages: 406 (281 human, 125 CI/bot)

Note: Of the 406 messages, 281 are human-generated, 125 are CI/bot (bluez.test.bot: 73, patchwork-bot+bluetooth: 23, BluezTestBot: 19, kernel test robot: 6, bugzilla-daemon: 4).

Summary

During week 34 (17 - 23 August 2026) the linux-bluetooth mailing list carried 406 messages, 281 from contributors and 125 from CI and bots. There were 80 human-initiated threads: 48 kernel patch series, 28 BlueZ userspace series and 4 discussions or reports. 23 patches were applied via patchwork and 17 commits were pushed to bluez repositories. The most active contributor was Luiz Augusto von Dentz (Intel) with 49 messages. 20 series went through more than one revision during the week.

Key Patch Series & Discussions

Kernel Patches

BlueZ Userspace Patches

Discussions & Bug Reports

Series Revised This Week

Top Contributors (by message count)

Merged to master (BlueZ & bluetooth-next)

Applied to bluetooth-next (kernel, via patchwork notifications)

• Bluetooth: hci_sync: add conditional locking annotations
• Bluetooth: eir: Fix OOB read in eir_get_service_data()
• Bluetooth: btnxpuart: Validate the FW dump header length
• Bluetooth: btmtk: fix subsystem reset error reporting
• Bluetooth: L2CAP: avoid maybe-return-locked in l2cap_get_chan_by_scid/
• Bluetooth: hci_core: add lockdep check to hci_conn lookups
• Bluetooth: btmtksdio: Fix SKB handling in the TX path
• Bluetooth: btnxpuart: Check remote M.2 connector availability before p
• Bluetooth: hci_core: Return -ENOMEM when the sent_cmd clone fails
• Bluetooth: mgmt: reply to cancelled mgmt commands instead of silently
• Bluetooth: hci_bcm4377: Ignore reserved PHY in ext adv reports on BCM4
• Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb
• Bluetooth: btintel_pcie: parse FW memory addresses via mailbox TLV
• Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_read
• Bluetooth: btintel_pcie: parse FW memory region addresses via mailbox
• Bluetooth: fix endless adv params retry after a cancelled connection
• Bluetooth: hci_uart: Fix false success return in hci_uart_setup()

Applied to BlueZ (via patchwork notifications)

• sdp-xml: Fix leaking the parse stack on malformed input
• sdp-xml: Use a queue to collect sequence members
• avctp: Fix typo in comment which contradicts the conditional below
• test-runner: “-a” option also stands for “–all”
• doc: Fix typo in test-runner.rst
• avrcp: Fix media/folder name not being set

Pushed to bluez repositories

• sdp-xml: Use a queue to collect sequence members
• obexd: Reference count the phonebook back-end setu…
• avrcp: Fix media/folder name not being set
• avctp: Fix typo in comment which contradicts the c…
• eir: Fix stack buffer overflow when parsing the re…
• battery: Add component battery objects
• plugins/admin: make AdminPolicy state per-adapter
• test-runner: “-a” option also stands for “–all”
• doc: Fix typo in test-runner.rst
• src: Modify MaxTxPower option documentation for Ch…
• mgmt: Add Security Level Changed event
• bluetooth.service: Fix ConfigurationDirectory warning
• player: Fix crash on MediaItem1.Play() without a b…
• build: Ignore the test-sdp-xml binary
• gatt-server: Fix integer overflow
• gatt-server: Fix integer overflow and 3 CI VLA wan…
• tools/iso-tester: fix GIOChannel refcounting

Company Focus Areas

Independent Contributors

• Bluetooth: add Synaptics BCM4384 support
• Add component batteries and Fast Pair Message Stream
• Bluetooth: btnxpuart: Keep FW dump header in coredump chunks
• Bluetooth: fix endless adv params retry after a cancelled connection

Qualcomm

• Bluetooth: hci_core: Return -ENOMEM when the sent_cmd clone fails
• Bluetooth: hci_qca: Do not write to the serial port after it is closed
• Bluetooth: mgmt: reply to cancelled mgmt commands instead of silently dropping
• ranging: mode validation and

Collabora

• plugin/admin: Make allowlist adapter-scoped and enforce at runtime
• mgmt/device: report link security level to D-Bus clients
• mgmt/device: report link security level to D-Bus clients
• mgmt/device: report link security level to D-Bus clients

Red Hat

• avctp: Fix typo in comment which contradicts the conditional below
• avrcp: Fix media/folder name not being set
• doc: Fix typo in test-runner.rst
• test-runner: “-a” option also stands for “–all”

Intel

• Replace the name2utf8 copies with str2utf8
• Replace the name2utf8 copies with str2utf8
• sdp-xml: Use a queue to collect sequence members
• Bluetooth: btintel_pcie: parse FW memory addresses via mailbox TLV

MediaTek

• Bluetooth: btmtksdio: Fix SKB handling in the TX path
• mediatek MT7925: update bluetooth firmware to 20260813113236

Max Planck Institute

• obexd: Reference count the phonebook back-end setup and teardown

UnionTech

• Bluetooth: btintel_pcie: Fix array bounds of device-controlled indices