[PATCH v2 0/3] fix leaks in some WMI error path

Nicolas Escande nico.escande at gmail.com
Wed May 6 06:42:37 PDT 2026


So this is similar work to what has been posted here [0] for ath12k.

When we use the pattern 'return ath11k_wmi_cmd_send(...)' without
explicitly checking the return value we fail to free the allocated skb.

This has been split into 2 patches per Jeff's guidance to hopefully
ease the backporting process.

[0] https://lore.kernel.org/linux-wireless/20260422163258.3013872-1-nico.escande@gmail.com/

---
Changes from v1:
  - Added patch to also fix ath11k_tm_cmd_wmi_ftm() as per Rameshkumar's remark

Nicolas Escande (3):
  wifi: ath11k: fix leak in error path of some WOW related WMI commands
  wifi: ath11k: fix error path leaks in some WMI calls
  wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()

 drivers/net/wireless/ath/ath11k/testmode.c |   1 +
 drivers/net/wireless/ath/ath11k/wmi.c      | 131 ++++++++++++++++++---
 2 files changed, 113 insertions(+), 19 deletions(-)

-- 
2.54.0




More information about the ath11k mailing list