[PATCH v2] wifi: ath11k: fix use after free in ath11k_dp_rx_msdu_coalesce.
Jeff Johnson
jeff.johnson at oss.qualcomm.com
Mon May 18 06:54:12 PDT 2026
On Tue, 05 May 2026 17:17:43 +0000, Willmar Knikker wrote:
> In ath11k_dp_rx_msdu_coalesce the loop uses ->is_continuation after
> the dev_kfree_skb_any. This can cause a use after free kfence.
>
> Use flag for caching is_continuation for use after the
> dev_kfree_skb_any.
>
> Changes in v2:
> - add bool _is_continuation for use after the free.
> - Add Fixes, label to commit.
>
> [...]
Applied, thanks!
[1/1] wifi: ath11k: fix use after free in ath11k_dp_rx_msdu_coalesce.
commit: 72b8654e3b83548f64524add2e9145e9b6c8a852
Best regards,
--
Jeff Johnson <jeff.johnson at oss.qualcomm.com>
More information about the ath11k
mailing list