linux-stable-mirror

mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git synced 2026-04-03 12:05:13 +02:00

Files

Lorenzo Bianconi 7b692dff8d wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()

[ Upstream commit 4e10a730d1 ]

Check frame length before accessing the mgmt fields in
mt76_connac2_mac_write_txwi_80211 in order to avoid a possible oob
access.

Fixes: 577dbc6c65 ("mt76: mt7915: enable offloading of sequence number assignment")
Signed-off-by: Lorenzo Bianconi <lorenzo@kernel.org>
Link: https://patch.msgid.link/20260226-mt76-addba-req-oob-access-v1-3-b0f6d1ad4850@kernel.org
[fix check to also cover mgmt->u.action.u.addba_req.capab,
correct Fixes tag]
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2026-03-13 17:20:42 +01:00

admtek

…

ath

wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg()

2026-03-04 07:21:18 -05:00

atmel

…

broadcom

wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet

2026-01-08 10:13:58 +01:00

intel