Johannes Berg 6c44abb2d4 wifi: cfg80211: clear wdev->cqm_config pointer on free ...

commit d5fee261df upstream.

When we free wdev->cqm_config when unregistering, we also
need to clear out the pointer since the same wdev/netdev
may get re-registered in another network namespace, then
destroyed later, running this code again, which results in
a double-free.

Reported-by: syzbot+36218cddfd84b5cc263e@syzkaller.appspotmail.com
Fixes: 37c20b2eff ("wifi: cfg80211: fix cqm_config access race")
Cc: stable@vger.kernel.org
Link: https://patch.msgid.link/20241022161742.7c34b2037726.I121b9cdb7eb180802eafc90b493522950d57ee18@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-11-08 16:28:23 +01:00

..

certs

wifi: cfg80211: fix certs build to not depend on file order

2024-01-01 12:42:39 +00:00

.gitignore

…

ap.c

…

chan.c

…

core.c

wifi: cfg80211: clear wdev->cqm_config pointer on free

2024-11-08 16:28:23 +01:00

core.h

Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"

2024-09-30 16:25:14 +02:00

debugfs.c

…

debugfs.h

…

ethtool.c

…

ibss.c

…

Kconfig

…

lib80211_crypt_ccmp.c

…

lib80211_crypt_tkip.c

…

lib80211_crypt_wep.c

…

lib80211.c

…

Makefile

…

mesh.c

…

mlme.c

wifi: cfg80211: fix assoc response warning on failed links

2023-10-23 13:25:30 +02:00

nl80211.c

genetlink: hold RCU in genlmsg_mcast()

2024-11-01 01:58:23 +01:00

nl80211.h

wifi: nl80211: Remove unused declaration nl80211_pmsr_dump_results()

2023-08-22 21:40:40 +02:00

ocb.c

wifi: cfg80211: ocb: don't leave if not joined

2023-08-22 21:40:39 +02:00

of.c

…

pmsr.c

wifi: cfg80211: pmsr: use correct nla_get_uX functions

2024-06-21 14:38:12 +02:00

radiotap.c

…

rdev-ops.h

wifi: cfg80211: fix 6 GHz scan request building

2024-07-25 09:50:41 +02:00

reg.c

wifi: nl80211/reg: add no-EHT regulatory flag

2023-06-21 14:01:29 +02:00

reg.h

…

scan.c

wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()

2024-10-04 16:28:56 +02:00

sme.c

wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors

2024-10-04 16:28:57 +02:00

sysfs.c

wifi: cfg80211: fully move wiphy work to unbound workqueue

2024-06-21 14:38:12 +02:00

sysfs.h

…

trace.c

…

trace.h

wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class

2024-06-12 11:11:22 +02:00

util.c

wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()

2024-08-03 08:53:39 +02:00

wext-compat.c

…

wext-compat.h

…

wext-core.c

wifi: cfg80211: add a flag to disable wireless extensions

2024-04-03 15:28:54 +02:00

wext-priv.c

…

wext-proc.c

…

wext-sme.c

wifi: cfg80211: wext: hold wiphy lock in siwgenie

2023-06-07 19:53:11 +02:00

wext-spy.c

…