Johannes Berg d4ccd3b5da wifi: mac80211: drop invalid source address OCB frames ...

[ Upstream commit d1b1a5eb27 ]

In OCB, don't accept frames from invalid source addresses
(and in particular don't try to create stations for them),
drop the frames instead.

Reported-by: syzbot+8b512026a7ec10dcbdd9@syzkaller.appspotmail.com
Closes: https://lore.kernel.org/r/6788d2d9.050a0220.20d369.0028.GAE@google.com/
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Tested-by: syzbot+8b512026a7ec10dcbdd9@syzkaller.appspotmail.com
Link: https://patch.msgid.link/20250616171838.7433379cab5d.I47444d63c72a0bd58d2e2b67bb99e1fea37eec6f@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-07-17 18:27:48 +02:00

..

6lowpan

…

9p

9p/xen: fix release of IRQ

2024-12-14 19:48:15 +01:00

802

net: 802: LLC+SNAP OID:PID lookup on start of skb data

2025-02-01 18:22:18 +01:00

8021q

net: vlan: don't propagate flags on open

2025-05-02 07:40:49 +02:00

appletalk

…

atm

atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().

2025-07-17 18:27:42 +02:00

ax25

…

batman-adv

batman-adv: Ignore own maximum aggregation size during RX

2025-04-10 14:30:53 +02:00

bluetooth

Bluetooth: L2CAP: Fix L2CAP MTU negotiation

2025-07-17 18:27:42 +02:00

bpf

…

bpfilter

…

bridge

netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it

2025-06-27 11:04:03 +01:00

caif

…

can

can: bcm: add missing rcu read protection for procfs content

2025-06-04 14:37:07 +02:00

ceph

…

core

bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE

2025-06-27 11:04:24 +01:00

dcb

…

dccp

net: fix data-races around sk->sk_forward_alloc

2025-02-01 18:22:31 +01:00

decnet

…

dns_resolver

…

dsa

…

ethernet

gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers

2024-09-12 11:06:47 +02:00

ethtool

ethtool: Fix wrong mod state in case of verbose and no_mask bitset

2024-12-14 19:48:20 +01:00

hsr

net: hsr: fix fill_frame_info() regression vs VLAN packets

2025-03-13 12:46:58 +01:00

ieee802154

net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()

2024-12-14 19:48:27 +01:00

ife

…

ipv4

net/ipv4: fix type mismatch in inet_ehash_locks_alloc() causing build failure

2025-06-27 11:04:23 +01:00

ipv6

Revert "ipv6: save dontfrag in cork"

2025-07-17 18:27:44 +02:00

iucv

…

kcm

…

key

…

l2tp

genetlink: hold RCU in genlmsg_mcast()

2024-11-08 16:21:57 +01:00

l3mdev

net: Add l3mdev index to flow struct and avoid oif reset for port devices

2024-10-17 15:08:35 +02:00

lapb

…

llc

llc: fix data loss when reading from a socket in llc_ui_recvmsg()

2025-06-04 14:37:07 +02:00

mac80211

wifi: mac80211: drop invalid source address OCB frames

2025-07-17 18:27:48 +02:00

mac802154

mac802154: check local interfaces before deleting sdata list

2025-02-01 18:22:28 +01:00

mpls

mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().

2025-06-27 11:04:22 +01:00

mptcp

mptcp: sockopt: fix getting IPV6_V6ONLY

2025-05-02 07:41:04 +02:00

ncsi

net: ncsi: Fix GCPS 64-bit member variables

2025-06-27 11:04:02 +01:00

netfilter

netfilter: nft_tunnel: fix geneve_opt dump

2025-06-27 11:04:04 +01:00

netlabel

calipso: unlock rcu before returning -EAFNOSUPPORT

2025-06-27 11:04:11 +01:00

netlink

netlink: terminate outstanding dump on socket close

2024-12-14 19:47:37 +01:00

netrom

netrom: check buffer length before accessing it

2025-01-09 13:25:02 +01:00

nfc

NFC: nci: uart: Set tty->disc_data only in success path

2025-06-27 11:04:13 +01:00

nsh

…

openvswitch

net: openvswitch: Fix the dead loop of MPLS parse

2025-06-27 11:04:04 +01:00

packet

af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK

2025-01-09 13:25:03 +01:00

phonet

…

psample

…

qrtr

net: qrtr: Update packets cloning when broadcasting

2024-10-17 15:07:58 +02:00

rds

…

rfkill

net: rfkill: gpio: Add check for clk_enable()

2024-12-14 19:47:55 +01:00

rose

rose: fix dangling neighbour pointers in rose_rt_device_down()

2025-07-17 18:27:47 +02:00

rxrpc

…

sched

net/sched: Always pass notifications when child class becomes empty

2025-07-17 18:27:47 +02:00

sctp

sctp: Do not wake readers in __sctp_write_space()

2025-06-27 11:04:18 +01:00

smc

net/smc: fix data error when recvmsg with MSG_PEEK flag

2025-03-13 12:46:48 +01:00

strparser

…

sunrpc

sunrpc: fix race in cache cleanup causing stale nextcheck time

2025-06-27 11:04:16 +01:00

switchdev

…

tipc

tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer

2025-06-27 11:04:22 +01:00

tls

net: Rename ->stream_memory_read to ->sock_is_readable

2025-06-27 11:04:09 +01:00

unix

af_unix: Remove put_pid()/put_cred() in copy_peercred().

2024-09-12 11:06:45 +02:00

vmw_vsock

vsock/vmci: Clear the vmci transport packet properly when initializing it

2025-07-17 18:27:44 +02:00

wimax

…

wireless

wifi: nl80211: reject cooked mode if it is set along with other flags

2025-03-13 12:47:37 +01:00

x25

…

xdp

…

xfrm

xfrm: Sanitize marks before insert

2025-06-04 14:37:07 +02:00

compat.c

…

devres.c

…

Kconfig

bpf: Clean up sockmap related Kconfigs

2025-06-27 11:04:09 +01:00

Makefile

…

socket.c

…

sysctl_net.c

…