linux-kernel - [PATCH wireless 0/2] Fix ieee80211_tx_h_select

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <cover.1752765971.git.repk@triplefau.lt>
Date: Thu, 17 Jul 2025 17:45:27 +0200
From: Remi Pommarel <repk@...plefau.lt>
To: linux-wireless@...r.kernel.org,
	linux-kernel@...r.kernel.org
Cc: Johannes Berg <johannes@...solutions.net>,
	Toke Høiland-Jørgensen <toke@...e.dk>,
	Remi Pommarel <repk@...plefau.lt>
Subject: [PATCH wireless 0/2] Fix ieee80211_tx_h_select_key() for 802.11 encaps offloading

The fix in [0] introduces issue with mt7921 chips (at least), due to the
802.11 encapsulation offloading support of those chips.
ieee80211_tx_h_select_key() treated 802.3 frames as if they were 802.11
ones causing the skb's control block hw_key to be invalid.

The first patch fixes the root cause of this issue and the second one
reapplies the initial use after free fix that has been temporarly
reverted meanwhile.

[0] https://lore.kernel.org/linux-wireless/06aa507b853ca385ceded81c18b0a6dd0f081bc8.1742833382.git.repk@triplefau.lt/

Remi Pommarel (2):
  wifi: mac80211: Check 802.11 encaps offloading in
    ieee80211_tx_h_select_key()
  Reapply "wifi: mac80211: Update skb's control block key in
    ieee80211_tx_dequeue()"

 net/mac80211/tx.c | 7 +++++++
 1 file changed, 7 insertions(+)

-- 
2.50.1