[PATCH v2] wifi: ath11k: fix use after free in ath11k_dp_rx_msdu_coalesce.

Jeff Johnson jeff.johnson at oss.qualcomm.com
Mon May 18 06:54:12 PDT 2026


On Tue, 05 May 2026 17:17:43 +0000, Willmar Knikker wrote:
> In ath11k_dp_rx_msdu_coalesce the loop uses ->is_continuation after
> the dev_kfree_skb_any. This can cause a use after free kfence.
> 
> Use flag for caching is_continuation for use after the
> dev_kfree_skb_any.
> 
> Changes in v2:
>  - add bool _is_continuation for use after the free.
>  - Add Fixes, label to commit.
> 
> [...]

Applied, thanks!

[1/1] wifi: ath11k: fix use after free in ath11k_dp_rx_msdu_coalesce.
      commit: 72b8654e3b83548f64524add2e9145e9b6c8a852

Best regards,
-- 
Jeff Johnson <jeff.johnson at oss.qualcomm.com>




More information about the ath11k mailing list