michael/linux
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Files
linux-5.4.y
linux/net/wireless
History
Dmitry Antipov a8bb681e87 wifi: cfg80211: fix use-after-free in cmp_bss() 
[ Upstream commit 26e84445f0 ]

Following bss_free() quirk introduced in commit 776b358017
("cfg80211: track hidden SSID networks properly"), adjust
cfg80211_update_known_bss() to free the last beacon frame
elements only if they're not shared via the corresponding
'hidden_beacon_bss' pointer.

Reported-by: syzbot+30754ca335e6fb7e3092@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=30754ca335e6fb7e3092
Fixes: 3ab8227d3e ("cfg80211: refactor cfg80211_bss_update")
Signed-off-by: Dmitry Antipov <dmantipov@yandex.ru>
Link: https://patch.msgid.link/20250813135236.799384-1-dmantipov@yandex.ru
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-09-09 18:43:56 +02:00
..
certs
wifi: cfg80211: fix certs build to not depend on file order
2024-01-08 11:29:46 +01:00
.gitignore
cfg80211: implement regdb signature checking
2017-10-11 14:24:24 +02:00
ap.c
cfg80211: call disconnect_wk when AP stops
2019-02-01 11:12:50 +01:00
chan.c
nl80211: Disallow setting of HT for channel 14
2019-10-30 10:07:22 +01:00
core.c
cfg80211: set custom regdomain after wiphy registration
2022-06-06 08:33:50 +02:00
core.h
nl80211: validate key indexes for cfg80211_registered_device
2021-06-10 13:37:02 +02:00
debugfs.c
wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
2022-09-15 12:04:50 +02:00
debugfs.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
ethtool.c
cfg80211: check wiphy driver existence for drvinfo report
2020-03-05 16:43:36 +01:00
ibss.c
cfg80211: ibss: use 11a mandatory rates for 6GHz band operation
2019-08-21 10:54:57 +02:00
Kconfig
lib80211: fix unmet direct dependendices config warning when !CRYPTO
2020-10-01 13:18:20 +02:00
lib80211_crypt_ccmp.c
lib80211: use crypto API ccm(aes) transform for CCMP processing
2019-07-26 13:22:47 +02:00
lib80211_crypt_tkip.c
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2019-07-08 20:57:08 -07:00
lib80211_crypt_wep.c
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2019-07-08 20:57:08 -07:00
lib80211.c
treewide: Add SPDX license identifier for more missed files
2019-05-21 10:50:45 +02:00
Makefile
cfg80211: make certificate generation more robust
2021-06-23 14:41:29 +02:00
mesh.c
nl80211: Add SOCKET_OWNER support to JOIN_MESH
2018-03-29 10:38:24 +02:00
mlme.c
wifi: cfg80211: reject HTC bit for management frames
2025-08-28 16:21:26 +02:00
nl80211.c
wifi: nl80211: reject cooked mode if it is set along with other flags
2025-03-13 12:43:28 +01:00
nl80211.h
cfg80211: Report Association Request frame IEs in association events
2019-02-22 13:35:09 +01:00
ocb.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
of.c
…
pmsr.c
wifi: cfg80211: pmsr: use correct nla_get_uX functions
2024-07-05 09:08:10 +02:00
radiotap.c
…
rdev-ops.h
cfg80211: Fix radar event during another phy CAC
2020-02-05 21:22:46 +00:00
reg.c
wifi: cfg80211: regulatory: improve invalid hints checking
2025-03-13 12:43:28 +01:00
reg.h
mac80211: fix scan when operating on DFS channels in ETSI domains
2019-10-07 22:10:50 +02:00
scan.c
wifi: cfg80211: fix use-after-free in cmp_bss()
2025-09-09 18:43:56 +02:00
sme.c
wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
2024-11-08 16:20:27 +01:00
sysfs.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 432
2019-06-05 17:37:16 +02:00
sysfs.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
trace.c
…
trace.h
wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class
2024-06-16 13:28:31 +02:00
util.c
wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
2024-08-19 05:33:29 +02:00
wext-compat.c
cfg80211: initialize on-stack chandefs
2019-10-01 17:56:18 +02:00
wext-compat.h
treewide: Add SPDX license identifier for missed files
2019-05-21 10:50:45 +02:00
wext-core.c
wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point()
2023-07-27 08:37:42 +02:00
wext-priv.c
…
wext-proc.c
proc: introduce proc_create_net{,_data}
2018-05-16 07:24:30 +02:00
wext-sme.c
cfg80211: wext: avoid copying malformed SSIDs
2019-10-04 14:04:08 +02:00
wext-spy.c
wireless: wext-spy: Fix out-of-bounds warning
2021-07-19 08:53:12 +02:00