[PATCH] wifi: ath11k: validate regulatory capability phy_id

Jeff Johnson jeff.johnson at oss.qualcomm.com
Tue Jul 14 11:08:03 PDT 2026


On Sat, 04 Jul 2026 09:10:40 +0800, Pengpeng Hou wrote:
> ath11k_wmi_tlv_ext_hal_reg_caps() copies firmware regulatory
> capability records into soc->hal_reg_cap[] using reg_cap.phy_id as
> the destination index.  The loop count is bounded by num_phy, but the
> phy_id embedded in each record is not checked against the fixed
> MAX_RADIOS-sized destination array.
> 
> Reject firmware records whose phy_id does not fit soc->hal_reg_cap[]
> before copying the parsed capability.
> 
> [...]

Applied, thanks!

[1/1] wifi: ath11k: validate regulatory capability phy_id
      commit: de4685d422a69a61f67e2e2ffdb5747d73d51308

Best regards,
-- 
Jeff Johnson <jeff.johnson at oss.qualcomm.com>




More information about the ath11k mailing list