[PATCH v2] wifi: ath11k: fix use after free in ath11k_dp_rx_msdu_coalesce.

Baochen Qiang baochen.qiang at oss.qualcomm.com
Mon May 11 20:05:53 PDT 2026



On 5/6/2026 1:17 AM, Willmar Knikker wrote:
> In ath11k_dp_rx_msdu_coalesce the loop uses ->is_continuation after
> the dev_kfree_skb_any. This can cause a use after free kfence.
> 
> Use flag for caching is_continuation for use after the
> dev_kfree_skb_any.
> 
> Fixes: d5c65159f289 ("ath11k: driver for Qualcomm IEEE 802.11ax devices")
> Signed-off-by: Willmar Knikker <willmar at met-dubbel-l.nl>

Reviewed-by: Baochen Qiang <baochen.qiang at oss.qualcomm.com>




More information about the ath11k mailing list