[PATCH 0/4] Bluetooth: Fix 2 devcoredump bugs and improve event length checks

From: Zijun Hu

Date: Sun Sep 13 2026 - 23:43:33 EST


This series fixes two devcoredump issues and improves the payload
length limits used to validate HCI events, — all simple.

Signed-off-by: Zijun Hu <zijun.hu@xxxxxxxxxxxxxxxx>
---
Zijun Hu (4):
Bluetooth: coredump: Fix skb leak in hci_devcd_append() stub
Bluetooth: coredump: Fix btmon heap-buffer-overflow
Bluetooth: hci_event: Use 254 as max LE Meta subevent payload length in hci_le_ev_table[]
Bluetooth: hci_event: Use 252 as max CC event payload length in hci_cc_table[]

include/net/bluetooth/coredump.h | 1 +
net/bluetooth/coredump.c | 17 ++++++++++++-----
net/bluetooth/hci_event.c | 28 +++++++++++++++++-----------
3 files changed, 30 insertions(+), 16 deletions(-)
---
base-commit: e40edfa049b967f0b9379bf549c59431302ad181
change-id: 20260913-misc_fix-6f6f518fe6b5

Best regards,
--
Zijun Hu <zijun.hu@xxxxxxxxxxxxxxxx>