]> git.ipfire.org Git - thirdparty/linux.git/commit
wifi: mac80211: remove station if connection prep fails
authorJohannes Berg <johannes.berg@intel.com>
Tue, 5 May 2026 13:15:34 +0000 (15:15 +0200)
committerJohannes Berg <johannes.berg@intel.com>
Wed, 6 May 2026 09:02:57 +0000 (11:02 +0200)
commit283fc9e44ff5b5ac967439b4951b80bd4299f4e4
treea4d82037ea1cf8c1ddc41d30a5d36bc029ced933
parentac8eb3e18f41e2cc8492cc1d358bcb786c850270
wifi: mac80211: remove station if connection prep fails

If connection preparation fails for MLO connections, then the
interface is completely reset to non-MLD. In this case, we must
not keep the station since it's related to the link of the vif
being removed. Delete an existing station. Any "new_sta" is
already being removed, so that doesn't need changes.

This fixes a use-after-free/double-free in debugfs if that's
enabled, because a vif going from MLD (and to MLD, but that's
not relevant here) recreates its entire debugfs.

Cc: stable@vger.kernel.org
Fixes: 81151ce462e5 ("wifi: mac80211: support MLO authentication/association with one link")
Reviewed-by: Miriam Rachel Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://patch.msgid.link/20260505151533.c4e52deb06ad.Iafe56cec7de8512626169496b134bce3a6c17010@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
net/mac80211/mlme.c