mirrors
/
linux-stable
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
1
0
Fork 0
Code Issues Releases Wiki Activity
linux-stable/net/mac80211
History
Nicolas Cavallari c7749bafbe wifi: mac80211: Fix ack frame idr leak when mesh has no route 
[ Upstream commit 39e7b5de98 ]

When trying to transmit an data frame with tx_status to a destination
that have no route in the mesh, then it is dropped without recrediting
the ack_status_frames idr.

Once it is exhausted, wpa_supplicant starts failing to do SAE with
NL80211_CMD_FRAME and logs "nl80211: Frame command failed".

Use ieee80211_free_txskb() instead of kfree_skb() to fix it.

Signed-off-by: Nicolas Cavallari <nicolas.cavallari@green-communications.fr>
Link: https://lore.kernel.org/r/20221027140133.1504-1-nicolas.cavallari@green-communications.fr
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
 		2022-12-08 11:15:39 +01:00
..
Kconfig
…
Makefile
…
aes_ccm.c
…
aes_ccm.h
…
aes_cmac.c
…
aes_cmac.h
…
aes_gcm.c
…
aes_gcm.h
…
aes_gmac.c
…
aes_gmac.h
…
agg-rx.c mac80211: don't reorder frames with SN smaller than SSN 2017-03-15 10:02:47 +08:00
agg-tx.c mac80211: send ADDBA requests using the tid/queue of the aggregation session 2021-12-22 09:05:14 +01:00
cfg.c wifi: mac80211: allow bw change during channel switch in mesh 2022-10-26 13:15:39 +02:00
chan.c wifi: mac80211: fix use-after-free in chanctx code 2022-06-14 16:52:34 +02:00
debug.h
…
debugfs.c
…
debugfs.h
…
debugfs_key.c
…
debugfs_key.h
…
debugfs_netdev.c mac80211: fix txq null pointer dereference 2019-10-29 09:15:03 +01:00
debugfs_netdev.h
…
debugfs_sta.c mac80211: drop data frames without key on encrypted links 2021-08-26 08:37:25 -04:00
debugfs_sta.h
…
driver-ops.c mac80211: fix station rate table updates on assoc 2021-02-10 09:09:25 +01:00
driver-ops.h mac80211: do not call driver wake_tx_queue op during reconfig 2019-04-27 09:34:45 +02:00
ethtool.c
…
ht.c mac80211: fix TX aggregation start/stop callback race 2018-11-10 07:42:47 -08:00
ibss.c wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected 2022-09-15 12:39:45 +02:00
ieee80211_i.h mac80211: upgrade passive scan to active scan on DFS channels after beacon rx 2022-06-14 16:52:35 +02:00
iface.c mac80211: add fragment cache to sta_info 2021-06-03 08:23:28 +02:00
key.c mac80211: drop data frames without key on encrypted links 2021-08-26 08:37:25 -04:00
key.h mac80211: prevent mixed key and fragment cache attacks 2021-06-03 08:23:28 +02:00
led.c
…
led.h
…
main.c mac80211: bail out if cipher schemes are invalid 2021-05-22 10:40:27 +02:00
mesh.c mac80211: free peer keys before vif down in mesh 2019-07-21 09:05:52 +02:00
mesh.h
…
mesh_hwmp.c mac80211: fix potential overflow when multiplying to u32 integers 2021-03-03 17:44:34 +01:00
mesh_pathtbl.c wifi: mac80211: Fix ack frame idr leak when mesh has no route 2022-12-08 11:15:39 +01:00
mesh_plink.c mac80211: Fix possible sband related NULL pointer de-reference 2018-03-24 11:00:17 +01:00
mesh_ps.c
…
mesh_sync.c mac80211: Remove invalid flag operations in mesh TSF synchronization 2017-11-30 08:39:13 +00:00
michael.c
…
michael.h
…
mlme.c mac80211: initialize variable have_higher_than_11mbit 2022-01-11 13:38:11 +01:00
ocb.c
…
offchannel.c mac80211: flush hw_roc_start work before cancelling the ROC 2017-10-05 09:43:58 +02:00
pm.c mac80211: flush delayed work when entering suspend 2017-03-15 10:02:47 +08:00
rate.c mac80211: fix station rate table updates on assoc 2021-02-10 09:09:25 +01:00
rate.h
…
rc80211_minstrel.c mac80211: minstrel: fix tx status processing corner case 2020-11-24 13:03:09 +01:00
rc80211_minstrel.h mac80211: minstrel: remove deferred sampling code 2020-11-24 13:03:09 +01:00
rc80211_minstrel_debugfs.c
…
rc80211_minstrel_ht.c mac80211: minstrel_ht: fix per-group max throughput rate initialization 2020-01-29 10:24:30 +01:00
rc80211_minstrel_ht.h
…
rc80211_minstrel_ht_debugfs.c
…
rx.c mac80211: fix rx reordering with non explicit / psmp ack policy 2022-05-25 08:39:50 +02:00
scan.c wifi: mac80211: Fix UAF in ieee80211_scan_rx() 2022-09-28 10:55:45 +02:00
spectmgmt.c mac80211: Do not disconnect on invalid operating class 2018-05-30 07:50:28 +02:00
sta_info.c mac80211: add fragment cache to sta_info 2021-06-03 08:23:28 +02:00
sta_info.h mac80211: drop data frames without key on encrypted links 2021-08-26 08:37:25 -04:00
status.c mac80211: add ieee80211_is_any_nullfunc() 2020-05-10 10:28:03 +02:00
tdls.c mac80211: handle deauthentication/disassociation from TDLS peer 2019-10-05 12:30:09 +02:00
tkip.c mac80211: Fix TKIP replay protection immediately after key setup 2020-02-05 13:05:50 +00:00
tkip.h
…
trace.c
…
trace.h
…
trace_msg.h
…
tx.c mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap 2021-10-06 10:23:41 +02:00
util.c mac80211: consider more elements in parsing CRC 2020-03-11 07:53:02 +01:00
vht.c mac80211: do not allow bigger VHT MPDUs than the hardware supports 2020-10-14 09:48:12 +02:00
wep.c mac80211: Add RX flag to indicate ICV stripped 2018-01-17 09:38:49 +01:00
wep.h
…
wme.c
…
wme.h
…
wpa.c mac80211: fix use-after-free in CCMP/GCMP RX 2021-10-06 10:23:41 +02:00
wpa.h
…