diff options
| author | Dmitry Antipov <dmantipov@yandex.ru> | 2025-08-13 16:52:36 +0300 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2025-08-26 13:45:09 +0200 |
| commit | 26e84445f02ce6b2fe5f3e0e28ff7add77f35e08 (patch) | |
| tree | 923639243605578568db70b405ac82272ebf2720 /rust/kernel | |
| parent | f64768bec0d57988782d26d1ea7ae21f959309dd (diff) | |
wifi: cfg80211: fix use-after-free in cmp_bss()
Following bss_free() quirk introduced in commit 776b3580178f
("cfg80211: track hidden SSID networks properly"), adjust
cfg80211_update_known_bss() to free the last beacon frame
elements only if they're not shared via the corresponding
'hidden_beacon_bss' pointer.
Reported-by: syzbot+30754ca335e6fb7e3092@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=30754ca335e6fb7e3092
Fixes: 3ab8227d3e7d ("cfg80211: refactor cfg80211_bss_update")
Signed-off-by: Dmitry Antipov <dmantipov@yandex.ru>
Link: https://patch.msgid.link/20250813135236.799384-1-dmantipov@yandex.ru
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'rust/kernel')
0 files changed, 0 insertions, 0 deletions