[RFC PATCH 08/12] wifi: cfg80211: reject WEP/TKIP with multi-link
Johannes Berg <[email protected]> Sat, 1 Aug 2026 09:58:24 +0200
| Newsgroups | org.kernel.vger.linux-wireless |
|---|---|
| Message-ID | <20260801095822.aab89c29717a.Ib47bf264ac9d2502312158503d1ca8aae99496c0@changeid> |
From: Johannes Berg <[email protected]> This is not possible by spec, so check and reject it in order to avoid being able to hit such code paths in the code later. Signed-off-by: Johannes Berg <[email protected]> --- net/wireless/util.c | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/net/wireless/util.c b/net/wireless/util.c index 41f83577f9e7..f075e96c994d 100644 --- a/net/wireless/util.c +++ b/net/wireless/util.c @@ -469,6 +469,17 @@ int cfg80211_validate_key_settings(struct cfg80211_registered_device *rdev, break; } + switch (params->cipher) { + case WLAN_CIPHER_SUITE_WEP40: + case WLAN_CIPHER_SUITE_WEP104: + case WLAN_CIPHER_SUITE_TKIP: + if (wdev->valid_links) + return -EINVAL; + break; + default: + break; + } + /* * Per Wi-Fi Aware v4.0 section 7.1.2, NAN Data interfaces * shall only use CCMP-128 or GCMP-256. -- 2.55.0