wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
authorBenjamin Lin <benjamin-jw.lin@mediatek.com>
Thu, 15 May 2025 03:29:47 +0000 (11:29 +0800)
committerFelix Fietkau <nbd@nbd.name>
Thu, 22 May 2025 10:57:36 +0000 (12:57 +0200)
commit80fda1cd7b0a1edd0849dc71403a070d0922118d
tree60d592cc010962bd3a5b701b8d16b97318ab516a
parent8b2f574845e33d02e7fbad2d3192a8b717567afa
wifi: mt76: mt7996: drop fragments with multicast or broadcast RA

IEEE 802.11 fragmentation can only be applied to unicast frames.
Therefore, drop fragments with multicast or broadcast RA. This patch
addresses vulnerabilities such as CVE-2020-26145.

Signed-off-by: Benjamin Lin <benjamin-jw.lin@mediatek.com>
Signed-off-by: Shayne Chen <shayne.chen@mediatek.com>
Link: https://patch.msgid.link/20250515032952.1653494-4-shayne.chen@mediatek.com
Signed-off-by: Felix Fietkau <nbd@nbd.name>
drivers/net/wireless/mediatek/mt76/mt7996/mac.c