archives/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-03-08 08:04:49 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
linux/drivers/net/wireless/mediatek
History
Exact
Lorenzo Bianconi 4e10a730d1 wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() 
Check frame length before accessing the mgmt fields in
mt76_connac2_mac_write_txwi_80211 in order to avoid a possible oob
access.

Fixes: 577dbc6c65 ("mt76: mt7915: enable offloading of sequence number assignment")
Signed-off-by: Lorenzo Bianconi <lorenzo@kernel.org>
Link: https://patch.msgid.link/20260226-mt76-addba-req-oob-access-v1-3-b0f6d1ad4850@kernel.org
[fix check to also cover mgmt->u.action.u.addba_req.capab,
correct Fixes tag]
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
2026-03-03 12:13:36 +01:00
..
mt76 wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() 2026-03-03 12:13:36 +01:00
mt7601u wifi: cfg80211/mac80211: Add support to get radio index 2025-06-24 15:19:27 +02:00
Kconfig treewide: replace '---help---' in Kconfig files with 'help' 2020-06-14 01:57:21 +09:00
Makefile