]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
wifi: iwlwifi: mld: validate txq_id in TX response handler
authorEmmanuel Grumbach <emmanuel.grumbach@intel.com>
Wed, 15 Jul 2026 18:57:01 +0000 (21:57 +0300)
committerMiri Korenblit <miriam.rachel.korenblit@intel.com>
Thu, 16 Jul 2026 18:12:16 +0000 (21:12 +0300)
commite66ddfd94b829b8ecaaac932d9487fb4de6d267c
treefd16f7b76fc30163550ec2e69c7dff8fbf0f2c2b
parentc1a1dc162870a5447cb0fbcf81983473744772d2
wifi: iwlwifi: mld: validate txq_id in TX response handler

Validate txq_id from TX response notification before passing to
iwl_trans_reclaim(). Other reclaim paths in this file perform this
check to prevent out-of-bounds access on malformed notifications.

Assisted-by: GitHubCopilot:claude-haiku-4.5
Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://patch.msgid.link/20260715215523.b938c2dcf08d.I8a88ec359e229f1c41ac9c49fd9ce28a2b62b274@changeid
drivers/net/wireless/intel/iwlwifi/mld/tx.c