]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
wifi: carl9170: do not ping device which has failed to load firmware
authorDmitry Antipov <dmantipov@yandex.ru>
Mon, 16 Jun 2025 18:12:05 +0000 (21:12 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 27 Jun 2025 10:05:35 +0000 (11:05 +0100)
commit527fad1ae32ffa2d4853a1425fe1c8dbb8c9744c
tree8a470b60bf55affd39f7905e67c16634c5df3eb0
parent5adc79cfdd211cd939b29cdf82d45121220674b3
wifi: carl9170: do not ping device which has failed to load firmware

[ Upstream commit 15d25307692312cec4b57052da73387f91a2e870 ]

Syzkaller reports [1, 2] crashes caused by an attempts to ping
the device which has failed to load firmware. Since such a device
doesn't pass 'ieee80211_register_hw()', an internal workqueue
managed by 'ieee80211_queue_work()' is not yet created and an
attempt to queue work on it causes null-ptr-deref.

[1] https://syzkaller.appspot.com/bug?extid=9a4aec827829942045ff
[2] https://syzkaller.appspot.com/bug?extid=0d8afba53e8fb2633217

Fixes: e4a668c59080 ("carl9170: fix spurious restart due to high latency")
Signed-off-by: Dmitry Antipov <dmantipov@yandex.ru>
Acked-by: Christian Lamparter <chunkeey@gmail.com>
Link: https://patch.msgid.link/20250616181205.38883-1-dmantipov@yandex.ru
Signed-off-by: Jeff Johnson <jeff.johnson@oss.qualcomm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/wireless/ath/carl9170/usb.c