Re: brcmfmac: driver crash with iOS 18.6.1, potential DoS

Hi Arend,

Attachement is the kernel .config file. Thanks for the quick response!

Regards,

--
Ken Chou

Arend van Spriel <[email protected]> 於 2025年9月26日 週五 上午2:31寫道：
>
> On 9/24/2025 4:53 AM, Hsien Chou wrote:
> > Hi Arend and everyone on the mailing lists,
> >
> > I'm reporting a driver crash in brcmfmac that can be triggered by an
> > iPhone with iOS 18.6.1 or newer. This issue *allows a remote,
> > unauthenticated device* to crash the Wi-Fi driver, leading to a denial
> > of service.
> >
> > The full details, including complete crash logs and a step-by-step
> > reproduction guide, are available on the GitHub issue page:
> > https://github.com/raspberrypi/linux/issues/7033 <https://github.com/
> > raspberrypi/linux/issues/7033>
> >
> > For a quick reference, here are the key details:
> > * *Affected devices:* A Raspberry Pi running as a Wi-Fi access point.
> > * *Trigger:* An iPhone with iOS > 18.6.1 attempts to view the properties
> > of the Wi-Fi network.
> > * *Root cause (based on preliminary analysis):* The driver panics,
> > possibly due to a malformed or unexpected frame.
> >
> > Please let me know if you need any additional information to debug this
> > issue.
>
> Having the kernel .config file from the Raspberry Pi would be helpful
> reproducing the driver build. Can you provide that?
>
> Regards,
> Arend