[RFC PATCH 08/12] wifi: cfg80211: reject WEP/TKIP with multi-link

Johannes Berg <[email protected]> Sat, 1 Aug 2026 09:58:24 +0200
Newsgroups org.kernel.vger.linux-wireless
Message-ID <20260801095822.aab89c29717a.Ib47bf264ac9d2502312158503d1ca8aae99496c0@changeid>
From: Johannes Berg <[email protected]>

This is not possible by spec, so check and reject it in
order to avoid being able to hit such code paths in the
code later.

Signed-off-by: Johannes Berg <[email protected]>
---
 net/wireless/util.c | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/net/wireless/util.c b/net/wireless/util.c
index 41f83577f9e7..f075e96c994d 100644
--- a/net/wireless/util.c
+++ b/net/wireless/util.c
@@ -469,6 +469,17 @@ int cfg80211_validate_key_settings(struct cfg80211_registered_device *rdev,
 		break;
 	}
 
+	switch (params->cipher) {
+	case WLAN_CIPHER_SUITE_WEP40:
+	case WLAN_CIPHER_SUITE_WEP104:
+	case WLAN_CIPHER_SUITE_TKIP:
+		if (wdev->valid_links)
+			return -EINVAL;
+		break;
+	default:
+		break;
+	}
+
 	/*
 	 * Per Wi-Fi Aware v4.0 section 7.1.2, NAN Data interfaces
 	 * shall only use CCMP-128 or GCMP-256.
-- 
2.55.0