ath10k: drop fragments with multicast DA for SDIO
authorWen Gong <wgong@codeaurora.org>
Tue, 11 May 2021 18:02:54 +0000 (20:02 +0200)
committerJohannes Berg <johannes.berg@intel.com>
Tue, 11 May 2021 18:15:26 +0000 (20:15 +0200)
commit40e7462dad6f3d06efdb17d26539e61ab6e34db1
tree360d864ef62db35335d3bfefc32c2b46e56a915b
parent65c415a144ad8132b6a6d97d4a1919ffc728e2d1
ath10k: drop fragments with multicast DA for SDIO

Fragmentation is not used with multicast frames. Discard unexpected
fragments with multicast DA. This fixes CVE-2020-26145.

Tested-on: QCA6174 hw3.2 SDIO WLAN.RMH.4.4.1-00049

Cc: stable@vger.kernel.org
Signed-off-by: Wen Gong <wgong@codeaurora.org>
Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
Link: https://lore.kernel.org/r/20210511200110.9ca6ca7945a9.I1e18b514590af17c155bda86699bc3a971a8dcf4@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
drivers/net/wireless/ath/ath10k/htt_rx.c