Commit b832eb98 authored by Felix Fietkau's avatar Felix Fietkau Committed by Liu Jian
Browse files

wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes

stable inclusion
from stable-v4.19.312
commit ea9a0cfc07a7d3601cc680718d9cff0d6927a921
category: bugfix
bugzilla: https://gitee.com/src-openeuler/kernel/issues/I9Q8YT
CVE: CVE-2024-35789

Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=ea9a0cfc07a7d3601cc680718d9cff0d6927a921



---------------------------

commit 4f2bdb3c5e3189297e156b3ff84b140423d64685 upstream.

When moving a station out of a VLAN and deleting the VLAN afterwards, the
fast_rx entry still holds a pointer to the VLAN's netdev, which can cause
use-after-free bugs. Fix this by immediately calling ieee80211_check_fast_rx
after the VLAN change.

Cc: stable@vger.kernel.org
Reported-by: default avatar <ranygh@riseup.net>
Signed-off-by: default avatarFelix Fietkau <nbd@nbd.name>
Link: https://msgid.link/20240316074336.40442-1-nbd@nbd.name


Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: default avatarLiu Jian <liujian56@huawei.com>
parent 3c0010cf
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment