Re: brcmfmac: driver crash with iOS 18.6.1, potential DoS

Hi Arend and everyone on the mailing lists,

I'm reporting a driver crash in brcmfmac that can be triggered by an
iPhone with iOS 18.6.1 or newer. This issue allows a remote,
unauthenticated device to crash the Wi-Fi driver, leading to a denial
of service.

The full details, including complete crash logs and a step-by-step
reproduction guide, are available on the GitHub issue page:
https://github.com/raspberrypi/linux/issues/7033

For a quick reference, here are the key details:
* Affected devices: A Raspberry Pi running as a Wi-Fi access point.
* Trigger: An iPhone with iOS > 18.6.1 attempts to view the properties
of the Wi-Fi network.
* Root cause (based on preliminary analysis): The driver panics,
possibly due to a malformed or unexpected frame.

Please let me know if you need any additional information to debug this issue.

Thank you for your time and attention.

Regards,

--
Ken Chou