[PATCH] wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
Jeff Johnson
jeff.johnson at oss.qualcomm.com
Thu Jul 9 07:49:50 PDT 2026
On Sat, 30 May 2026 11:42:52 +0000, Dmitry Morgun wrote:
> When the first entry in msdu_details has a zero buffer address,
> the code accesses msdu_details[i - 1] with i == 0, causing a
> buffer underflow.
>
> Fix similarly to ath12k_wifi7_hal_rx_msdu_list_get() by adding
> a separate check for i == 0 before the main condition to prevent
> the out-of-bounds access.
>
> [...]
Applied, thanks!
[1/1] wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
commit: 7f11e70629650ff6ea140984e5ce188b775b2683
Best regards,
--
Jeff Johnson <jeff.johnson at oss.qualcomm.com>
More information about the ath11k
mailing list