]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()
authorLorenzo Bianconi <lorenzo@kernel.org>
Thu, 26 Feb 2026 19:11:14 +0000 (20:11 +0100)
committerJohannes Berg <johannes.berg@intel.com>
Tue, 3 Mar 2026 11:09:45 +0000 (12:09 +0100)
commit60862846308627e9e15546bb647a00de44deb27b
tree60780ba7216c0f0d3471d929d51fa65ace01ff37
parent9003a0e3b6a7d950705b4c01ae4b3c968dc366f4
wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()

Check frame length before accessing the mgmt fields in
mt7996_mac_write_txwi_80211 in order to avoid a possible oob access.

Fixes: 98686cd21624c ("wifi: mt76: mt7996: add driver for MediaTek Wi-Fi 7 (802.11be) devices")
Signed-off-by: Lorenzo Bianconi <lorenzo@kernel.org>
Link: https://patch.msgid.link/20260226-mt76-addba-req-oob-access-v1-1-b0f6d1ad4850@kernel.org
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
drivers/net/wireless/mediatek/mt76/mt7996/mac.c