]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
wifi: ath10k: Fix memory leak on unsupported WMI command
authorLoic Poulain <loic.poulain@oss.qualcomm.com>
Fri, 26 Sep 2025 19:56:56 +0000 (21:56 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 13 Nov 2025 20:33:56 +0000 (15:33 -0500)
[ Upstream commit 2e9c1da4ee9d0acfca2e0a3d78f3d8cb5802da1b ]

ath10k_wmi_cmd_send takes ownership of the passed buffer (skb) and has the
responsibility to release it in case of error. This patch fixes missing
free in case of early error due to unhandled WMI command ID.

Tested-on: WCN3990 hw1.0 WLAN.HL.3.3.7.c2-00931-QCAHLSWMTPLZ-1

Fixes: 553215592f14 ("ath10k: warn if give WMI command is not supported")
Suggested-by: Jeff Johnson <jeff.johnson@oss.qualcomm.com>
Signed-off-by: Loic Poulain <loic.poulain@oss.qualcomm.com>
Reviewed-by: Baochen Qiang <baochen.qiang@oss.qualcomm.com>
Link: https://patch.msgid.link/20250926195656.187970-1-loic.poulain@oss.qualcomm.com
Signed-off-by: Jeff Johnson <jeff.johnson@oss.qualcomm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
drivers/net/wireless/ath/ath10k/wmi.c

index fdab67a56e438cc8aae5e30b1a234fca9c184d68..32754f894f0b06033f34e53648830196672f7be6 100644 (file)
@@ -1937,6 +1937,7 @@ int ath10k_wmi_cmd_send(struct ath10k *ar, struct sk_buff *skb, u32 cmd_id)
        if (cmd_id == WMI_CMD_UNSUPPORTED) {
                ath10k_warn(ar, "wmi command %d is not supported by firmware\n",
                            cmd_id);
+               dev_kfree_skb_any(skb);
                return ret;
        }