Felix Fietkau c8bddbd91b wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes ... commit 4f2bdb3c5e upstream. When moving a station out of a VLAN and deleting the VLAN afterwards, the fast_rx entry still holds a pointer to the VLAN's netdev, which can cause use-after-free bugs. Fix this by immediately calling ieee80211_check_fast_rx after the VLAN change. Cc: stable@vger.kernel.org Reported-by: ranygh@riseup.net Signed-off-by: Felix Fietkau <nbd@nbd.name> Link: https://msgid.link/20240316074336.40442-1-nbd@nbd.name Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-04-10 16:19:31 +02:00
..
aead_api.c
aead_api.h
aes_ccm.h
aes_cmac.c
aes_cmac.h
aes_gcm.h
aes_gmac.c
aes_gmac.h
agg-rx.c	mac80211: fix memory leaks with element parsing	2022-10-15 07:59:05 +02:00
agg-tx.c	wifi: mac80211: sdata can be NULL during AMPDU start	2023-01-24 07:22:42 +01:00
airtime.c	wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration	2022-12-08 11:28:40 +01:00
cfg.c	wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes	2024-04-10 16:19:31 +02:00
chan.c	wifi: mac80211: simplify chanctx allocation	2023-06-09 10:32:25 +02:00
debug.h
debugfs.c
debugfs.h
debugfs_key.c
debugfs_key.h
debugfs_netdev.c
debugfs_netdev.h
debugfs_sta.c
debugfs_sta.h
driver-ops.c	wifi: mac80211: sdata can be NULL during AMPDU start	2023-01-24 07:22:42 +01:00
driver-ops.h	mac80211: mark TX-during-stop for TX in in_reconfig	2021-12-22 09:32:34 +01:00
ethtool.c
fils_aead.c
fils_aead.h
he.c
ht.c
ibss.c	mac80211: fix memory leaks with element parsing	2022-10-15 07:59:05 +02:00
ieee80211_i.h	wifi: mac80211: fix MBSSID parsing use-after-free	2022-10-15 07:59:05 +02:00
iface.c	Revert "wifi: mac80211: fix memory leak in ieee80211_if_add()"	2023-01-24 07:22:49 +01:00
Kconfig
key.c
key.h
led.c
led.h	mac80211: fix throughput LED trigger	2021-12-08 09:04:38 +01:00
main.c	wifi: mac80211: fix memory free error when registering wiphy fail	2022-12-02 17:41:01 +01:00
Makefile
mesh.c	mac80211: always allocate struct ieee802_11_elems	2022-10-15 07:59:05 +02:00
mesh.h	mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh	2022-01-11 15:35:13 +01:00
mesh_hwmp.c	mac80211: always allocate struct ieee802_11_elems	2022-10-15 07:59:05 +02:00
mesh_pathtbl.c	wifi: mac80211: Fix ack frame idr leak when mesh has no route	2022-12-02 17:41:01 +01:00
mesh_plink.c	wifi: mac80211: mesh_plink: fix matches_local logic	2024-01-05 15:13:28 +01:00
mesh_ps.c
mesh_sync.c	mac80211: mesh: clean up rx_bcn_presp API	2022-10-15 07:59:04 +02:00
michael.c
michael.h
mlme.c	wifi: mac80211: adding missing drv_mgd_complete_tx() call	2024-03-01 13:21:47 +01:00
ocb.c
offchannel.c
pm.c
rate.c
rate.h
rc80211_minstrel_ht.c	mac80211: minstrel_ht: fix where rate stats are stored (fixes debugfs output)	2022-06-09 10:22:31 +02:00
rc80211_minstrel_ht.h
rc80211_minstrel_ht_debugfs.c
rx.c	wifi: mac80211: check S1G action frame size	2023-09-23 11:09:56 +02:00
s1g.c	wifi: mac80211: Set TWT Information Frame Disabled bit as 1	2022-11-16 09:58:14 +01:00
scan.c	mac80211: always allocate struct ieee802_11_elems	2022-10-15 07:59:05 +02:00
spectmgmt.c
sta_info.c	wifi: mac80211: fix race condition on enabling fast-xmit	2024-03-01 13:21:44 +01:00
sta_info.h	mac80211: fix regression in SSN handling of addba tx	2021-12-22 09:32:34 +01:00
status.c
tdls.c	mac80211: always allocate struct ieee802_11_elems	2022-10-15 07:59:05 +02:00
tkip.c
tkip.h
trace.c
trace.h	wifi: mac80211: fix min center freq offset tracing	2023-05-24 17:36:51 +01:00
trace_msg.h
tx.c	wifi: mac80211: fix race condition on enabling fast-xmit	2024-03-01 13:21:44 +01:00
util.c	wifi: mac80211: fix MBSSID parsing use-after-free	2022-10-15 07:59:05 +02:00
vht.c
wep.c
wep.h
wme.c	wifi: mac80211: fix qos on mesh interfaces	2023-03-30 12:47:58 +02:00
wme.h
wpa.c
wpa.h