[PATCH ath-current 0/7] wifi: ath12k: Fix Issues in REO RX Queue Updates

Jeff Johnson jeff.johnson at oss.qualcomm.com
Mon Sep 22 13:43:03 PDT 2025


On Wed, 06 Aug 2025 16:47:43 +0530, Nithyanantham Paramasivam wrote:
> During stress test scenarios, when the REO command ring becomes full,
> the RX queue update command issued during peer deletion fails due to
> insufficient space. In response, the host performs a dma_unmap and
> frees the associated memory. However, the hardware still retains a
> reference to the same memory address. If the kernel later reallocates
> this address, unaware that the hardware is still using it, it can
> lead to memory corruption-since the host might access or modify
> memory that is still actively referenced by the hardware.
> 
> [...]

Applied, thanks!

[1/7] wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256
      commit: 82993345aef6987a916337ebd2fca3ff4a6250a7
[2/7] wifi: ath12k: Refactor RX TID deletion handling into helper function
      commit: 7c32476253f11210ac24c7818ca07e19bc032521
[3/7] wifi: ath12k: Refactor RX TID buffer cleanup into helper function
      commit: f829a1f8f27555742c9759870895f22c4ab7febb
[4/7] wifi: ath12k: Refactor REO command to use ath12k_dp_rx_tid_rxq
      commit: 6a01985105843e8c043c2bffe25c54b71bc45002
[5/7] wifi: ath12k: Add Retry Mechanism for REO RX Queue Update Failures
      commit: 3bf2e57e7d6cd3e0896c2aa5e86f11aeb7bc3702
[6/7] wifi: ath12k: Fix flush cache failure during RX queue update
      commit: 5e32edc6942570429d9c64d0641fc2addbf92be1
[7/7] wifi: ath12k: Use 1KB Cache Flush Command for QoS TID Descriptors
      commit: b706fb4e580ba66b2c05be93809807c9312008e2

Best regards,
-- 
Jeff Johnson <jeff.johnson at oss.qualcomm.com>




More information about the ath12k mailing list