android_kernel_motorola_sm6375/drivers/net
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Dmitry Antipov 0140d3d37f wifi: carl9170: do not ping device which has failed to load firmware
[ Upstream commit 15d25307692312cec4b57052da73387f91a2e870 ]

Syzkaller reports [1, 2] crashes caused by an attempts to ping
the device which has failed to load firmware. Since such a device
doesn't pass 'ieee80211_register_hw()', an internal workqueue
managed by 'ieee80211_queue_work()' is not yet created and an
attempt to queue work on it causes null-ptr-deref.

[1] https://syzkaller.appspot.com/bug?extid=9a4aec827829942045ff
[2] https://syzkaller.appspot.com/bug?extid=0d8afba53e8fb2633217

Fixes: e4a668c590 ("carl9170: fix spurious restart due to high latency")
Signed-off-by: Dmitry Antipov <dmantipov@yandex.ru>
Acked-by: Christian Lamparter <chunkeey@gmail.com>
Link: https://patch.msgid.link/20250616181205.38883-1-dmantipov@yandex.ru
Signed-off-by: Jeff Johnson <jeff.johnson@oss.qualcomm.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-06-27 11:02:57 +01:00
..
appletalk
arcnet arcnet: Add NULL check in com20020pci_probe() 2025-04-10 14:29:43 +02:00
bonding bonding: report duplicate MAC address in all situations 2025-06-04 14:32:32 +02:00
caif caif_virtio: fix wrong pointer check in cfv_probe() 2025-03-13 12:43:29 +01:00
can can: flexcan: only change CAN state when link up in system PM 2025-04-10 14:29:43 +02:00
dsa net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING 2025-06-04 14:32:28 +02:00
ethernet i40e: fix MMIO write access to an invalid page in i40e_clear_hw 2025-06-27 11:02:55 +01:00
fddi
fjes
hamradio
hippi
hyperv hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event 2024-11-08 16:20:51 +01:00
ieee802154 ieee802154: ca8210: Use proper setters and getters for bitwise types 2025-06-04 14:32:31 +02:00
ipvlan
netdevsim
phy net/mdiobus: Fix potential out-of-bounds read/write access 2025-06-27 11:02:50 +01:00
plip
ppp net: ppp: Add bound checking for skb data on ppp_sync_txmung 2025-05-02 07:39:09 +02:00
slip slip: make slhc_remember() more robust against malicious packets 2024-11-08 16:20:46 +01:00
team team: better TEAM_OPTION_TYPE_STRING validation 2025-03-13 12:43:12 +01:00
usb net: ch9200: fix uninitialised access during mii_nway_restart 2025-06-27 11:02:52 +01:00
vmxnet3
wan
wimax
wireless wifi: carl9170: do not ping device which has failed to load firmware 2025-06-27 11:02:57 +01:00
xen-netback net/xen-netback: prevent UAF in xenvif_flush_hash() 2025-02-01 18:18:53 +01:00
dummy.c
eql.c
geneve.c geneve: Suppress list corruption splat in geneve_destroy_tunnels(). 2025-03-13 12:43:22 +01:00
gtp.c gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). 2025-03-13 12:43:22 +01:00
ifb.c
Kconfig drivers: net: Fix Kconfig indentation, continued 2024-11-08 16:20:35 +01:00
LICENSE.SRC
loopback.c net: loopback: Avoid sending IP packets without an Ethernet header 2025-03-13 12:43:24 +01:00
macsec.c macsec: don't increment counters for an unrelated SA 2024-11-08 16:20:49 +01:00
macvlan.c
macvtap.c
Makefile
mdio.c
mii.c
net_failover.c
netconsole.c
nlmon.c
ntb_netdev.c
rionet.c
sb1000.c
Space.c
sungem_phy.c
tap.c
thunderbolt.c
tun.c tun: revert fix group permission check 2025-03-13 12:43:06 +01:00
veth.c
virtio_net.c virtio-net: Add validation for used length 2025-05-02 07:39:23 +02:00
vrf.c
vsockmon.c
vxlan.c vxlan: Do not treat dst cache initialization errors as fatal 2025-06-27 11:02:55 +01:00
xen-netfront.c xen/netfront: fix crash when removing device 2024-12-19 18:05:05 +01:00