linux-stable/net/mac80211
Felix Fietkau 76fad1174a wifi: mac80211: fix race condition on enabling fast-xmit
[ Upstream commit bcbc84af11 ]

fast-xmit must only be enabled after the sta has been uploaded to the driver,
otherwise it could end up passing the not-yet-uploaded sta via drv_tx calls
to the driver, leading to potential crashes because of uninitialized drv_priv
data.
Add a missing sta->uploaded check and re-check fast xmit after inserting a sta.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
Link: https://msgid.link/20240104181059.84032-1-nbd@nbd.name
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-03-01 13:06:09 +01:00
..
aead_api.c
aead_api.h
aes_ccm.h
aes_cmac.c
aes_cmac.h
aes_gcm.h
aes_gmac.c
aes_gmac.h
agg-rx.c
agg-tx.c mac80211: send ADDBA requests using the tid/queue of the aggregation session 2021-12-22 09:19:00 +01:00
cfg.c wifi: mac80211: don't return unset power in ieee80211_get_tx_power() 2023-11-28 16:46:31 +00:00
chan.c wifi: mac80211: fix use-after-free in chanctx code 2022-06-14 16:59:26 +02:00
debug.h
debugfs.c
debugfs.h
debugfs_key.c
debugfs_key.h
debugfs_netdev.c
debugfs_netdev.h
debugfs_sta.c mac80211: drop data frames without key on encrypted links 2021-08-26 08:36:42 -04:00
debugfs_sta.h
driver-ops.c mac80211: fix station rate table updates on assoc 2021-02-10 09:21:07 +01:00
driver-ops.h
ethtool.c
fils_aead.c
fils_aead.h
he.c
ht.c
ibss.c wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected 2022-09-15 12:17:04 +02:00
ieee80211_i.h mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh 2023-02-25 11:51:51 +01:00
iface.c mac80211: add fragment cache to sta_info 2021-06-03 08:38:03 +02:00
Kconfig
key.c mac80211: drop data frames without key on encrypted links 2021-08-26 08:36:42 -04:00
key.h mac80211: prevent mixed key and fragment cache attacks 2021-06-03 08:38:03 +02:00
led.c
led.h
main.c mac80211: bail out if cipher schemes are invalid 2021-05-22 10:59:36 +02:00
Makefile
mesh.c
mesh.h mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh 2023-02-25 11:51:51 +01:00
mesh_hwmp.c mac80211: fix potential overflow when multiplying to u32 integers 2021-03-04 09:39:36 +01:00
mesh_pathtbl.c mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh 2023-02-25 11:51:51 +01:00
mesh_plink.c wifi: mac80211: mesh_plink: fix matches_local logic 2024-01-08 11:27:33 +01:00
mesh_ps.c
mesh_sync.c
michael.c
michael.h
mlme.c mac80211: initialize variable have_higher_than_11mbit 2022-01-11 13:58:49 +01:00
ocb.c
offchannel.c
pm.c
rate.c mac80211: fix station rate table updates on assoc 2021-02-10 09:21:07 +01:00
rate.h
rc80211_minstrel.c mac80211: minstrel: fix tx status processing corner case 2020-11-24 13:27:26 +01:00
rc80211_minstrel.h mac80211: minstrel: remove deferred sampling code 2020-11-24 13:27:25 +01:00
rc80211_minstrel_debugfs.c
rc80211_minstrel_ht.c mac80211: minstrel_ht: fix per-group max throughput rate initialization 2020-01-27 14:51:06 +01:00
rc80211_minstrel_ht.h
rc80211_minstrel_ht_debugfs.c
rx.c mac80211: fix rx reordering with non explicit / psmp ack policy 2022-05-25 09:10:40 +02:00
scan.c wifi: mac80211: Fix UAF in ieee80211_scan_rx() 2022-09-28 11:02:54 +02:00
spectmgmt.c
sta_info.c wifi: mac80211: fix race condition on enabling fast-xmit 2024-03-01 13:06:09 +01:00
sta_info.h mac80211: drop data frames without key on encrypted links 2021-08-26 08:36:42 -04:00
status.c mac80211: add ieee80211_is_any_nullfunc() 2020-05-10 10:30:12 +02:00
tdls.c mac80211: add option for setting control flags 2020-04-02 15:28:20 +02:00
tkip.c mac80211: Fix TKIP replay protection immediately after key setup 2020-02-05 14:43:46 +00:00
tkip.h
trace.c
trace.h
trace_msg.h
tx.c wifi: mac80211: fix race condition on enabling fast-xmit 2024-03-01 13:06:09 +01:00
util.c mac80211: validate extended element ID is present 2021-12-22 09:19:03 +01:00
vht.c mac80211: don't set set TDLS STA bandwidth wider than possible 2020-12-30 11:26:03 +01:00
wep.c
wep.h
wme.c
wme.h
wpa.c mac80211: fix use-after-free in CCMP/GCMP RX 2021-10-06 15:31:21 +02:00
wpa.h