tag d1bbd146130d5cf325e56eff54d11a42bfaa14fd
tagger Luiz Augusto von Dentz <luiz.von.dentz@intel.com> Fri Sep 27 10:53:44 2024 -0400
object b25e11f978b63cb7857890edb3a698599cddb10e

bluetooth pull request for net:

 - btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
 - MGMT: Fix possible crash on mgmt_index_removed
 - L2CAP: Fix uaf in l2cap_connect
 - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

commit b25e11f978b63cb7857890edb3a698599cddb10e
author Luiz Augusto von Dentz <luiz.von.dentz@intel.com> Thu Sep 12 12:17:00 2024 -0400
committer Luiz Augusto von Dentz <luiz.von.dentz@intel.com> Fri Sep 27 10:52:20 2024 -0400
tree 38f370000be12db52c8b2e99581af0bb7e4ff5c9
parent 7b1ab460592ca818e7b52f27cd3ec86af79220d1

Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

This aligned BR/EDR JUST_WORKS method with LE which since 92516cd97fd4
("Bluetooth: Always request for user confirmation for Just Works")
always request user confirmation with confirm_hint set since the
likes of bluetoothd have dedicated policy around JUST_WORKS method
(e.g. main.conf:JustWorksRepairing).

CVE: CVE-2024-8805
Cc: stable@vger.kernel.org
Fixes: ba15a58b179e ("Bluetooth: Fix SSP acceptor just-works confirmation without MITM")
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Tested-by: Kiran K <kiran.k@intel.com>