]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
wifi: iwlwifi: mld: cancel mlo_scan_start_wk
authorMiri Korenblit <miriam.rachel.korenblit@intel.com>
Thu, 29 Jan 2026 19:27:09 +0000 (21:27 +0200)
committerMiri Korenblit <miriam.rachel.korenblit@intel.com>
Tue, 3 Feb 2026 13:02:05 +0000 (15:02 +0200)
commit5ff641011ab7fb63ea101251087745d9826e8ef5
tree54b02c823cf547d5699386c71903b9ef141e0efa
parent1cac38910ecb881b09f61f57545a771bbe57ba68
wifi: iwlwifi: mld: cancel mlo_scan_start_wk

mlo_scan_start_wk is not canceled on disconnection. In fact, it is not
canceled anywhere except in the restart cleanup, where we don't really
have to.

This can cause an init-after-queue issue: if, for example, the work was
queued and then drv_change_interface got executed.

This can also cause use-after-free: if the work is executed after the
vif is freed.

Fixes: 9748ad82a9d9 ("wifi: iwlwifi: defer MLO scan after link activation")
Reviewed-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://patch.msgid.link/20260129212650.a36482a60719.I5bf64a108ca39dacb5ca0dcd8b7258a3ce8db74c@changeid
drivers/net/wireless/intel/iwlwifi/mld/iface.c
drivers/net/wireless/intel/iwlwifi/mld/mac80211.c