]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
wifi: libertas: fix WARNING in usb_tx_block
authorSzymon Wilczek <swilczek.lx@gmail.com>
Sun, 21 Dec 2025 15:58:06 +0000 (16:58 +0100)
committerJohannes Berg <johannes.berg@intel.com>
Thu, 8 Jan 2026 12:44:27 +0000 (13:44 +0100)
commitd66676e6ca96bf8680f869a9bd6573b26c634622
tree7c8e25403853d43cbd707d499901dc5f0fa65429
parent7bab5bdb81e33cd0bc0aa848931ff47940ad54b0
wifi: libertas: fix WARNING in usb_tx_block

The function usb_tx_block() submits cardp->tx_urb without ensuring that
any previous transmission on this URB has completed. If a second call
occurs while the URB is still active (e.g. during rapid firmware loading),
usb_submit_urb() detects the active state and triggers a warning:
'URB submitted while active'.

Fix this by enforcing serialization: call usb_kill_urb() before
submitting the new request. This ensures the URB is idle and safe to reuse.

Reported-by: syzbot+67969ab6a2551c27f71b@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=67969ab6a2551c27f71b
Signed-off-by: Szymon Wilczek <swilczek.lx@gmail.com>
Link: https://patch.msgid.link/20251221155806.23925-1-swilczek.lx@gmail.com
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
drivers/net/wireless/marvell/libertas/if_usb.c