Toke Høiland-Jørgensen 3d06535693 ath9k: Protect queue draining by rcu_read_lock() ...

commit 182b191710 upstream.

When ath9k was switched over to use the mac80211 intermediate queues,
node cleanup now drains the mac80211 queues. However, this call path is
not protected by rcu_read_lock() as it was previously entirely internal
to the driver which uses its own locking.

This leads to a possible rcu_dereference() without holding
rcu_read_lock(); but only if a station is cleaned up while having
packets queued on the TXQ. Fix this by adding the rcu_read_lock() to the
caller in ath9k.

Fixes: 50f08edf98 ("ath9k: Switch to using mac80211 intermediate software queues.")
Cc: stable@vger.kernel.org
Reported-by: Ben Greear <greearb@candelatech.com>
Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-04-19 08:56:20 +02:00

..

appletalk

…

arcnet

…

bonding

bonding: process the err returned by dev_set_allmulti properly in bond_enslave

2018-04-12 12:32:25 +02:00

caif

…

can

can: cc770: Fix use after free in cc770_tx_interrupt()

2018-03-28 18:24:45 +02:00

cris

…

dsa

net: dsa: mv88e6xxx: Unregister MDIO bus on error path

2018-02-25 11:08:00 +01:00

ethernet

net/mlx4_core: Fix memory leak while delete slave's resources

2018-04-12 12:32:27 +02:00

fddi

…

fjes

…

hamradio

…

hippi

hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close

2018-02-25 11:08:04 +01:00

hyperv

hv_netvsc: Fix the TX/RX buffer default sizes

2018-03-24 11:01:22 +01:00

ieee802154

net: ieee802154: adf7242: Fix bug if defined DEBUG

2018-03-19 08:42:49 +01:00

ipvlan

ipvlan: add L2 check for packets arriving via virtual devices

2018-03-19 08:42:56 +01:00

phy

net: phy: Tell caller result of phy_change()

2018-03-31 18:10:39 +02:00

plip

…

ppp

pptp: remove a buggy dst release in pptp_connect()

2018-04-12 12:32:24 +02:00

slip

slip: Check if rstate is initialized before uncompressing

2018-04-19 08:56:16 +02:00

team

team: move dev_mc_sync after master_upper_dev_link in team_port_add

2018-04-12 12:32:27 +02:00

usb

lan78xx: Correctly indicate invalid OTP

2018-04-19 08:56:16 +02:00

vmxnet3

vmxnet3: repair memory leak

2018-01-31 14:03:49 +01:00

wan

hdlc_ppp: carrier detect ok, don't turn off negotiation

2018-03-08 22:41:08 -08:00

wimax

…

wireless

ath9k: Protect queue draining by rcu_read_lock()

2018-04-19 08:56:20 +02:00

xen-netback

…

dummy.c

…

eql.c

…

geneve.c

…

gtp.c

…

ifb.c

…

Kconfig

…

LICENSE.SRC

…

loopback.c

…

macsec.c

…

macvlan.c

macvlan: filter out unsupported feature flags

2018-03-31 18:10:39 +02:00

macvtap.c

…

Makefile

…

mdio.c

…

mii.c

…

netconsole.c

…

nlmon.c

…

ntb_netdev.c

…

rionet.c

…

sb1000.c

…

Space.c

…

sungem_phy.c

…

tap.c

…

tun.c

tuntap: disable preemption during XDP processing

2018-03-08 22:41:18 -08:00

veth.c

veth: set peer GSO values

2018-03-19 08:42:54 +01:00

virtio_net.c

virtio_net: Disable interrupts if napi_complete_done rescheduled napi

2018-03-19 08:42:54 +01:00

vrf.c

vrf: Fix use after free and double free in vrf_finish_output

2018-04-12 12:32:24 +02:00

vsockmon.c

…

vxlan.c

vxlan: update skb dst pmtu on tx path

2018-03-03 10:24:26 +01:00

xen-netfront.c

xen-netfront: enable device after manual module load

2018-03-03 10:24:36 +01:00