[4.14,0/1] ath9k: fix use-after-free in ath9k_hif_usb_rx_cb

Message ID	20220819112226.922595-1-dragos.panait@windriver.com (mailing list archive)
Headers	show Return-Path: <linux-wireless-owner@kernel.org> From: Dragos-Marian Panait <dragos.panait@windriver.com> To: <stable@vger.kernel.org> CC: Pavel Skripkin <paskripkin@gmail.com>, =?utf-8?q?Toke_H=C3=B8iland-J?= =?utf-8?q?=C3=B8rgensen?= <toke@toke.dk>, Kalle Valo <quic_kvalo@quicinc.com>, Kalle Valo <kvalo@kernel.org>, "David S . Miller" <davem@davemloft.net>, Eric Dumazet <edumazet@google.com>, Jakub Kicinski <kuba@kernel.org>, Paolo Abeni <pabeni@redhat.com>, Vasanthakumar Thiagarajan <vasanth@atheros.com>, Sujith <Sujith.Manoharan@atheros.com>, Senthil Balasubramanian <senthilkumar@atheros.com>, "John W . Linville" <linville@tuxdriver.com>, <linux-wireless@vger.kernel.org>, <netdev@vger.kernel.org>, <linux-kernel@vger.kernel.org> Subject: [PATCH 4.14 0/1] ath9k: fix use-after-free in ath9k_hif_usb_rx_cb Date: Fri, 19 Aug 2022 14:22:25 +0300 Message-ID: <20220819112226.922595-1-dragos.panait@windriver.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit Precedence: bulk
Series	ath9k: fix use-after-free in ath9k_hif_usb_rx_cb \| expand [4.14,0/1] ath9k: fix use-after-free in ath9k_hif_usb_rx_cb [4.14,1/1] ath9k: fix use-after-free in ath9k_hif_usb_rx_cb

Message ID

20220819112226.922595-1-dragos.panait@windriver.com (mailing list archive)

Headers

From: Dragos-Marian Panait <dragos.panait@windriver.com>
To: <stable@vger.kernel.org>
CC: Pavel Skripkin <paskripkin@gmail.com>, =?utf-8?q?Toke_H=C3=B8iland-J?=
	=?utf-8?q?=C3=B8rgensen?= <toke@toke.dk>,
 Kalle Valo <quic_kvalo@quicinc.com>, Kalle Valo <kvalo@kernel.org>,
 "David S . Miller" <davem@davemloft.net>, Eric Dumazet <edumazet@google.com>,
 Jakub Kicinski <kuba@kernel.org>, Paolo Abeni <pabeni@redhat.com>,
 Vasanthakumar Thiagarajan <vasanth@atheros.com>,
 Sujith <Sujith.Manoharan@atheros.com>,
 Senthil Balasubramanian <senthilkumar@atheros.com>,
 "John W . Linville" <linville@tuxdriver.com>,
 <linux-wireless@vger.kernel.org>, <netdev@vger.kernel.org>,
 <linux-kernel@vger.kernel.org>
Subject: [PATCH 4.14 0/1] ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
Date: Fri, 19 Aug 2022 14:22:25 +0300
Message-ID: <20220819112226.922595-1-dragos.panait@windriver.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit
Precedence: bulk

Series

ath9k: fix use-after-free in ath9k_hif_usb_rx_cb | expand

Message

Dragos-Marian Panait Aug. 19, 2022, 11:22 a.m. UTC

The following commit is needed to fix CVE-2022-1679:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0ac4827f78c7ffe8eef074bc010e7e34bc22f533

Pavel Skripkin (1):
  ath9k: fix use-after-free in ath9k_hif_usb_rx_cb

 drivers/net/wireless/ath/ath9k/htc.h          | 10 +++++-----
 drivers/net/wireless/ath/ath9k/htc_drv_init.c |  3 ++-
 2 files changed, 7 insertions(+), 6 deletions(-)


base-commit: b641242202ed8c52030f7b6d8cf15886d3c4fc82