Johannes Berg ba780cb0cf wifi: mac80211: disable softirqs for queued frame handling ...

commit 321028bc45 upstream.

As noticed by syzbot, calling ieee80211_handle_queued_frames()
(and actually handling frames there) requires softirqs to be
disabled, since we call into the RX code. Fix that in the case
of cleaning up frames left over during shutdown.

Fixes: 177c6ae972 ("wifi: mac80211: handle tasklet frames before stopping")
Reported-by: syzbot+1d516edf1e74469ba5d3@syzkaller.appspotmail.com
Link: https://patch.msgid.link/20240626091559.cd6f08105a6e.I74778610a5ff2cf8680964698131099d2960352a@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2024-07-25 09:50:57 +02:00

..

6lowpan

…

9p

net/9p: fix uninit-value in p9_client_rpc()

2024-06-16 13:47:41 +02:00

802

…

8021q

net: gro: fix udp bad offset in socket lookup by adding {inner_}network_offset to napi_gro_cb

2024-05-17 12:02:07 +02:00

appletalk

…

atm

…

ax25

ax25: Replace kfree() in ax25_dev_free() with ax25_dev_put()

2024-06-21 14:38:14 +02:00

batman-adv

batman-adv: Don't accept TT entries for out-of-spec VIDs

2024-07-05 09:34:04 +02:00

bluetooth

Bluetooth: L2CAP: Fix deadlock

2024-07-25 09:50:57 +02:00

bpf

bpf: Set run context for rawtp test_run callback

2024-06-21 14:38:16 +02:00

bpfilter

…

bridge

net: bridge: mst: fix suspicious rcu usage in br_mst_set_state

2024-06-21 14:38:36 +02:00

caif

…

can

net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new

2024-07-05 09:34:01 +02:00

ceph

libceph: fix race between delayed_work() and ceph_monc_stop()

2024-07-18 13:21:22 +02:00

core

net: fix rc7's __skb_datagram_iter()

2024-07-18 13:21:13 +02:00

dcb

…

dccp

Fix race for duplicate reqsk on identical SYN

2024-07-05 09:33:48 +02:00

devlink

devlink: fix port new reply cmd type

2024-03-26 18:20:11 -04:00

dns_resolver

…

dsa

…

ethernet

ethernet: Add helper for assigning packet type when dest address does not match device address

2024-05-02 16:32:46 +02:00

ethtool

ethtool: netlink: do not return SQI value if link is down

2024-07-18 13:21:14 +02:00

handshake

…

hsr

hsr: Simplify code for announcing HSR nodes timer setup

2024-05-17 12:02:24 +02:00

ieee802154

…

ife

…

ipv4

tcp: avoid too many retransmit packets

2024-07-18 13:21:17 +02:00

ipv6

ila: block BH in ila_output()

2024-07-25 09:50:43 +02:00

iucv

net/iucv: Avoid explicit cpumask var allocation on stack

2024-07-05 09:33:51 +02:00

kcm

net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function

2024-03-26 18:19:40 -04:00

key

…

l2tp

net l2tp: drop flow hash on forward

2024-05-17 12:02:02 +02:00

l3mdev

…

lapb

…

llc

…

mac80211

wifi: mac80211: disable softirqs for queued frame handling

2024-07-25 09:50:57 +02:00

mac802154

net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()

2024-07-25 09:50:52 +02:00

mctp

net: mctp: copy skb ext data when fragmenting

2024-03-26 18:19:34 -04:00

mpls

net: mpls: error out if inner headers are not set

2024-04-13 13:07:41 +02:00

mptcp

mptcp: pm: update add_addr counters after connect

2024-06-21 14:38:38 +02:00

ncsi

net/ncsi: Fix the multi thread manner of NCSI driver

2024-06-21 14:38:14 +02:00

netfilter

netfilter: nf_tables: unconditionally flush pending work before notifier

2024-07-11 12:49:13 +02:00

netlabel

…

netlink

netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter

2024-03-06 14:48:34 +00:00

netrom

netrom: Fix a memory leak in nr_heartbeat_expiry()

2024-06-27 13:49:06 +02:00

nfc

nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()

2024-06-12 11:12:51 +02:00

nsh

nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().

2024-05-17 12:02:02 +02:00

openvswitch

openvswitch: get related ct labels from its master if it is not confirmed

2024-07-05 09:33:46 +02:00

packet

af_packet: avoid a false positive warning in packet_setsockopt()

2024-06-27 13:49:01 +02:00

phonet

phonet: fix rtm_phonet_notify() skb allocation

2024-05-17 12:02:22 +02:00

psample

…

qrtr

net: qrtr: ns: Fix module refcnt

2024-06-12 11:12:12 +02:00

rds

net/rds: fix possible cp null dereference

2024-04-10 16:35:49 +02:00

rfkill

…

rose

…

rxrpc

rxrpc: Only transmit one ACK per jumbo packet received

2024-05-17 12:02:23 +02:00

sched

net/sched: Fix UAF when resolving a clash

2024-07-18 13:21:14 +02:00

sctp

sctp: prefer struct_size over open coded arithmetic

2024-07-11 12:49:06 +02:00

smc

net/smc: avoid overwriting when adjusting sock bufsizes

2024-06-21 14:38:16 +02:00

strparser

…

sunrpc

net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket

2024-07-18 13:21:14 +02:00

switchdev

net: bridge: switchdev: Skip MDB replays of deferred events on offload

2024-03-01 13:35:06 +01:00

tipc

tipc: force a dst refcount before doing decryption

2024-06-27 13:49:07 +02:00

tls

tls: fix missing memory barrier in tls_init

2024-06-12 11:12:50 +02:00

unix

af_unix: Read with MSG_PEEK loops if the first unread byte is OOB

2024-06-21 14:38:36 +02:00

vmw_vsock

vsock/virtio: fix packet delivery to tap device

2024-04-10 16:35:50 +02:00

wireless

wifi: cfg80211: wext: set ssids=NULL for passive scans

2024-07-25 09:50:57 +02:00

x25

net/x25: fix incorrect parameter validation in the x25_getsockopt() function

2024-03-26 18:19:41 -04:00

xdp

xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING

2024-04-17 11:19:28 +02:00

xfrm

net: fix __dst_negative_advice() race

2024-06-16 13:47:44 +02:00

compat.c

…

devres.c

…

Kconfig

…

Kconfig.debug

…

Makefile

…

socket.c

…

sysctl_net.c

…