Felix Fietkau db8d32d6b2 wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta ...

[ Upstream commit 12b220a6171faf10638ab683a975cadcf1a352d6 ]

Avoid potential data corruption issues caused by uninitialized driver
private data structures.

Reported-by: Brian Coverstone <brian@mainsequence.net>
Fixes: 6a9d1b91f34d ("mac80211: add pre-RCU-sync sta removal driver operation")
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Link: https://lore.kernel.org/r/20230324120924.38412-3-nbd@nbd.name
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2023-04-20 12:02:10 +02:00

..

aes_ccm.c

…

aes_ccm.h

…

aes_cmac.c

…

aes_cmac.h

…

aes_gcm.c

…

aes_gcm.h

…

aes_gmac.c

…

aes_gmac.h

…

agg-rx.c

…

agg-tx.c

mac80211: send ADDBA requests using the tid/queue of the aggregation session

2021-12-22 09:17:58 +01:00

cfg.c

wifi: mac80211: allow bw change during channel switch in mesh

2022-10-26 13:16:59 +02:00

chan.c

wifi: mac80211: fix use-after-free in chanctx code

2022-06-14 16:53:52 +02:00

debug.h

…

debugfs_key.c

…

debugfs_key.h

…

debugfs_netdev.c

mac80211: fix txq null pointer dereference

2019-10-29 09:16:57 +01:00

debugfs_netdev.h

…

debugfs_sta.c

mac80211: drop data frames without key on encrypted links

2021-08-26 08:37:05 -04:00

debugfs_sta.h

…

debugfs.c

…

debugfs.h

…

driver-ops.c

mac80211: fix station rate table updates on assoc

2021-02-10 09:12:09 +01:00

driver-ops.h

mac80211: do not call driver wake_tx_queue op during reconfig

2019-04-27 09:35:38 +02:00

ethtool.c

…

fils_aead.c

…

fils_aead.h

…

ht.c

…

ibss.c

wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected

2022-09-15 12:23:51 +02:00

ieee80211_i.h

mac80211: upgrade passive scan to active scan on DFS channels after beacon rx

2022-06-14 16:53:54 +02:00

iface.c

mac80211: add fragment cache to sta_info

2021-06-03 08:36:14 +02:00

Kconfig

…

key.c

mac80211: drop data frames without key on encrypted links

2021-08-26 08:37:05 -04:00

key.h

mac80211: prevent mixed key and fragment cache attacks

2021-06-03 08:36:13 +02:00

led.c

…

led.h

…

main.c

mac80211: bail out if cipher schemes are invalid

2021-05-22 10:57:32 +02:00

Makefile

…

mesh_hwmp.c

mac80211: fix potential overflow when multiplying to u32 integers

2021-03-03 18:22:40 +01:00

mesh_pathtbl.c

wifi: mac80211: Fix ack frame idr leak when mesh has no route

2022-12-08 11:16:29 +01:00

mesh_plink.c

…

mesh_ps.c

…

mesh_sync.c

…

mesh.c

mac80211: free peer keys before vif down in mesh

2019-07-21 09:04:19 +02:00

mesh.h

…

michael.c

…

michael.h

…

mlme.c

mac80211: initialize variable have_higher_than_11mbit

2022-01-11 13:57:35 +01:00

ocb.c

…

offchannel.c

…

pm.c

…

rate.c

mac80211: fix station rate table updates on assoc

2021-02-10 09:12:09 +01:00

rate.h

…

rc80211_minstrel_debugfs.c

…

rc80211_minstrel_ht_debugfs.c

…

rc80211_minstrel_ht.c

mac80211: minstrel_ht: fix per-group max throughput rate initialization

2020-01-27 14:46:43 +01:00

rc80211_minstrel_ht.h

…

rc80211_minstrel.c

mac80211: minstrel: fix tx status processing corner case

2020-11-24 13:05:56 +01:00

rc80211_minstrel.h

mac80211: minstrel: remove deferred sampling code

2020-11-24 13:05:56 +01:00

rx.c

mac80211: fix rx reordering with non explicit / psmp ack policy

2022-05-25 08:41:21 +02:00

scan.c

wifi: mac80211: Fix UAF in ieee80211_scan_rx()

2022-09-28 10:56:49 +02:00

spectmgmt.c

…

sta_info.c

wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta

2023-04-20 12:02:10 +02:00

sta_info.h

mac80211: drop data frames without key on encrypted links

2021-08-26 08:37:05 -04:00

status.c

mac80211: add ieee80211_is_any_nullfunc()

2020-05-10 10:29:03 +02:00

tdls.c

mac80211: handle deauthentication/disassociation from TDLS peer

2019-06-25 11:36:55 +08:00

tkip.c

mac80211: Fix TKIP replay protection immediately after key setup

2020-02-05 14:18:21 +00:00

tkip.h

…

trace_msg.h

mac80211: Increase MAX_MSG_LEN

2019-05-16 19:42:21 +02:00

trace.c

…

trace.h

…

tx.c

mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap

2021-10-06 15:05:08 +02:00

util.c

mac80211: consider more elements in parsing CRC

2020-03-11 18:02:44 +01:00

vht.c

mac80211: do not allow bigger VHT MPDUs than the hardware supports

2020-10-14 09:51:07 +02:00

wep.c

…

wep.h

…

wme.c

…

wme.h

…

wpa.c

mac80211: fix use-after-free in CCMP/GCMP RX

2021-10-06 15:05:08 +02:00

wpa.h

…