Hello,
commit 711f8c3fb3db ("Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM") did not apply to 5.4-stable tree previously.
One of the notable dependencies is commit 15f02b910562 ("Bluetooth: L2CAP: Add initial code for Enhanced Credit Based Mode") and that doesn't apply to 5.4-stable either due to a mismatch on `l2cap_sock_setsockopt_old` in l2cap_sock.c.
After doing a comparison between upstream and older revisions, I merged the changes and backported 15f02b910562 to 5.4-stable.
During compilation, I discovered another dependency commit 145720963b6c ("Bluetooth: L2CAP: Add definitions for Enhanced Credit Based Mode") and added that to patchset.
All those combined will hopefully allow us to have the fix for CVE-2022-42896 in 5.4-stable.
Thank you.
Luiz Augusto von Dentz (3): Bluetooth: L2CAP: Add initial code for Enhanced Credit Based Mode Bluetooth: L2CAP: Add definitions for Enhanced Credit Based Mode Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
include/net/bluetooth/l2cap.h | 43 +++ net/bluetooth/l2cap_core.c | 570 +++++++++++++++++++++++++++++++++- net/bluetooth/l2cap_sock.c | 24 +- 3 files changed, 617 insertions(+), 20 deletions(-)