[PATCH] wifi: ath11k: fix use after free in ath11k_dp_rx_msdu_coalesce.

Jeff Johnson jeff.johnson at oss.qualcomm.com
Tue May 5 08:13:25 PDT 2026


On 5/5/2026 7:30 AM, Willmar Knikker wrote:
> In ath11k_dp_rx_msdu_coalesce the loop uses ->is_continuation after
> the dev_kfree_skb_any. This can cause a use after free kfence.
> 
> Move the use after the dev_kfree_skb_any after use of ->is_continuation
> inline with the while in the while loop above this one.
> 
> Signed-off-by: Willmar Knikker <willmar at met-dubbel-l.nl>

This issue is present since day 1...

Fixes: d5c65159f289 ("ath11k: driver for Qualcomm IEEE 802.11ax devices")




More information about the ath11k mailing list