]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996_mac_write_txwi_80...
authorLorenzo Bianconi <lorenzo@kernel.org>
Sun, 31 May 2026 09:38:57 +0000 (11:38 +0200)
committerFelix Fietkau <nbd@nbd.name>
Tue, 9 Jun 2026 10:15:22 +0000 (10:15 +0000)
commit61370e6674b5253de5686813ceeceebc35a7d3e5
treed2a56e53ce84b42fa49f7e435bf8fc3eb677aaf7
parent831074096d0450308357271fc0ffd3f600a2487e
wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996_mac_write_txwi_80211()

For injected frames (e.g. via radiotap), mac80211 can pass
info->control.vif = NULL, as explicitly noted in struct ieee80211_tx_info.
Check vif pointer before executing ieee80211_vif_is_mld() in
mt7996_mac_write_txwi_80211 routine in order to avoid a possible NULL
pointer dereference.

Fixes: f0b0b239b8f36 ("wifi: mt76: mt7996: rework mt7996_mac_write_txwi() for MLO support")
Signed-off-by: Lorenzo Bianconi <lorenzo@kernel.org>
Link: https://patch.msgid.link/20260531-mt7996_mac_write_txwi_80211-null-ptr-deref-v1-1-6dd38e1d3422@kernel.org
Signed-off-by: Felix Fietkau <nbd@nbd.name>
drivers/net/wireless/mediatek/mt76/mt7996/mac.c