[PATCH wireless 0/3] wifi: mt76: Fix possible out-of-bound accesses in mt76 driver

[Lorenzo Bianconi]

> Check mgmt frame length before accessing header fields in order to avoid
> a possible oob access for injected frames.

Hi Felix,

do you think these patches can go directly into the wireless tree or do you
prefer to get them into your tree?

Regards,
Lorenzo

> 
> ---
> Lorenzo Bianconi (3):
>       wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()
>       wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211()
>       wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()
> 
>  drivers/net/wireless/mediatek/mt76/mt76_connac_mac.c | 1 +
>  drivers/net/wireless/mediatek/mt76/mt7925/mac.c      | 1 +
>  drivers/net/wireless/mediatek/mt76/mt7996/mac.c      | 1 +
>  3 files changed, 3 insertions(+)
> ---
> base-commit: 8bf22c33e7a172fbc72464f4cc484d23a6b412ba
> change-id: 20260226-mt76-addba-req-oob-access-848280920814
> 
> Best regards,
> -- 
> Lorenzo Bianconi <lorenzo at kernel.org>
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/linux-arm-kernel/attachments/20260226/a883da2f/attachment.sig>