Re: [PATCH] wifi: ath11k: fix use after free in ath11k_dp_rx_msdu_coalesce.
Jeff Johnson <[email protected]>
| Newsgroups | org.infradead.lists.ath11k,org.kernel.vger.linux-wireless |
|---|---|
| Message-ID | <[email protected]> |
On 5/5/2026 7:30 AM, Willmar Knikker wrote: > In ath11k_dp_rx_msdu_coalesce the loop uses ->is_continuation after > the dev_kfree_skb_any. This can cause a use after free kfence. > > Move the use after the dev_kfree_skb_any after use of ->is_continuation > inline with the while in the while loop above this one. > > Signed-off-by: Willmar Knikker <[email protected]> This issue is present since day 1... Fixes: d5c65159f289 ("ath11k: driver for Qualcomm IEEE 802.11ax devices")