ath10k: drop fragments with multicast DA for PCIe
authorWen Gong <wgong@codeaurora.org>
Tue, 11 May 2021 18:02:53 +0000 (20:02 +0200)
committerJohannes Berg <johannes.berg@intel.com>
Tue, 11 May 2021 18:15:16 +0000 (20:15 +0200)
commit65c415a144ad8132b6a6d97d4a1919ffc728e2d1
tree18f5719d2f4f3d8aa73117897c1349df4ee6b348
parenta1166b2653db2f3de7338b9fb8a0f6e924b904ee
ath10k: drop fragments with multicast DA for PCIe

Fragmentation is not used with multicast frames. Discard unexpected
fragments with multicast DA. This fixes CVE-2020-26145.

Tested-on: QCA6174 hw3.2 PCI WLAN.RM.4.4.1-00110-QCARMSWP-1

Cc: stable@vger.kernel.org
Signed-off-by: Wen Gong <wgong@codeaurora.org>
Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
Link: https://lore.kernel.org/r/20210511200110.5a0bd289bda8.Idd6ebea20038fb1cfee6de924aa595e5647c9eae@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
drivers/net/wireless/ath/ath10k/htt_rx.c