[PATCH] wifi: b43: fix use-after-free in b43_bcma_remove()

Andreas Wendleder gonsolo at gmail.com
Mon Oct 12 17:16:04 PDT 2026


Adding the people the CI bot listed as not CCed (b43 author and others
working on b43), for information. No changes to the patch.

The bug is in mainline: b43_bcma_remove() reads wldev->dev after
b43_one_core_detach() has freed wldev. b43_ssb_remove() already takes a
copy, so the patch does the same.

Andreas



More information about the b43-dev mailing list