]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
authorPauli Virtanen <pav@iki.fi>
Sat, 9 Aug 2025 08:36:20 +0000 (11:36 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 28 Aug 2025 14:34:45 +0000 (16:34 +0200)
commit5e12d3c0507988a8d7a4efb8faba8d1f582f69d2
tree02a8e9b5a603572108b24040f137f3ad8547b1ca
parent6839859a00d44f01762f7c1163f5126088ad1b6b
Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established

[ Upstream commit 0b3725dbf61b51e7c663834811b3691157ae17d6 ]

BN == 0x00 in CIS Established means no isochronous data for the
corresponding direction (Core v6.1 pp. 2394). In this case SDU MTU
should be 0.

However, the specification does not say the Max_PDU_C_To_P or P_To_C are
then zero.  Intel AX210 in Framed CIS mode sets nonzero Max_PDU for
direction with zero BN.  This causes failure later when we try to LE
Setup ISO Data Path for disabled direction, which is disallowed (Core
v6.1 pp. 2750).

Fix by setting SDU MTU to 0 if BN == 0.

Fixes: 2be22f1941d5f ("Bluetooth: hci_event: Fix parsing of CIS Established Event")
Signed-off-by: Pauli Virtanen <pav@iki.fi>
Reviewed-by: Paul Menzel <pmenzel@molgen.mpg.de>
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/bluetooth/hci_event.c