]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
mac80211: Check port authorization in the ieee80211_tx_dequeue() case
authorJouni Malinen <jouni@codeaurora.org>
Thu, 26 Mar 2020 14:51:34 +0000 (15:51 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 2 Apr 2020 13:09:50 +0000 (15:09 +0200)
commit8924ef44fd34f11a6cbd0a686a952e3d6aef51a1
tree09a96539d75df8fc6eaf4be1be3b4ca42548b147
parentc5e58d88054178092a1c5fc77f3c2b7c3b614902
mac80211: Check port authorization in the ieee80211_tx_dequeue() case

commit ce2e1ca703071723ca2dd94d492a5ab6d15050da upstream.

mac80211 used to check port authorization in the Data frame enqueue case
when going through start_xmit(). However, that authorization status may
change while the frame is waiting in a queue. Add a similar check in the
dequeue case to avoid sending previously accepted frames after
authorization change. This provides additional protection against
potential leaking of frames after a station has been disconnected and
the keys for it are being removed.

Cc: stable@vger.kernel.org
Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
Link: https://lore.kernel.org/r/20200326155133.ced84317ea29.I34d4c47cd8cc8a4042b38a76f16a601fbcbfd9b3@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/mac80211/tx.c