wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
authorFelix Fietkau <nbd@nbd.name>
Sat, 16 Mar 2024 07:43:36 +0000 (08:43 +0100)
committerJohannes Berg <johannes.berg@intel.com>
Mon, 25 Mar 2024 14:23:06 +0000 (15:23 +0100)
commit4f2bdb3c5e3189297e156b3ff84b140423d64685
tree771f4636aca1edd9b152df451846a5a2d7bd1455
parent27f8f108c8455b42ec5f55806c5dc73ae2c5d075
wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes

When moving a station out of a VLAN and deleting the VLAN afterwards, the
fast_rx entry still holds a pointer to the VLAN's netdev, which can cause
use-after-free bugs. Fix this by immediately calling ieee80211_check_fast_rx
after the VLAN change.

Cc: stable@vger.kernel.org
Reported-by: ranygh@riseup.net
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Link: https://msgid.link/20240316074336.40442-1-nbd@nbd.name
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
net/mac80211/cfg.c