Johannes Berg d5fee261df wifi: cfg80211: clear wdev->cqm_config pointer on free ... When we free wdev->cqm_config when unregistering, we also need to clear out the pointer since the same wdev/netdev may get re-registered in another network namespace, then destroyed later, running this code again, which results in a double-free. Reported-by: syzbot+36218cddfd84b5cc263e@syzkaller.appspotmail.com Fixes: 37c20b2eff ("wifi: cfg80211: fix cqm_config access race") Cc: stable@vger.kernel.org Link: https://patch.msgid.link/20241022161742.7c34b2037726.I121b9cdb7eb180802eafc90b493522950d57ee18@changeid Signed-off-by: Johannes Berg <johannes.berg@intel.com>		2024-10-25 17:53:40 +02:00
..
certs	wifi: cfg80211: fix certs build to not depend on file order	2023-12-14 09:11:51 +01:00
tests	wifi: cfg80211: reject non-conformant 6 GHz center frequencies	2024-06-12 13:04:25 +02:00
.gitignore
ap.c	wifi: cfg80211: remove wdev mutex	2023-09-11 11:27:23 +02:00
chan.c	wifi: cfg80211: reject non-conformant 6 GHz center frequencies	2024-06-12 13:04:25 +02:00
core.c	wifi: cfg80211: clear wdev->cqm_config pointer on free	2024-10-25 17:53:40 +02:00
core.h	wifi: cfg80211: skip indicating signal for per-STA profile BSSs	2024-09-06 12:56:33 +02:00
debugfs.c	wifi: cfg80211: add locked debugfs wrappers	2023-11-27 11:24:58 +01:00
debugfs.h
ethtool.c	wifi: cfg80211: use strscpy to replace strlcpy	2022-07-15 11:43:12 +02:00
ibss.c	wifi: cfg80211: move DFS related members to links[] in wireless_dev	2024-09-06 13:01:05 +02:00
Kconfig	wifi: cfg80211/mac80211: remove dependency on non-existing option	2024-01-18 14:50:01 +01:00
lib80211_crypt_ccmp.c	wifi: lib80211: Constify struct lib80211_crypto_ops	2024-08-27 10:28:51 +02:00
lib80211_crypt_tkip.c	wifi: lib80211: Constify struct lib80211_crypto_ops	2024-08-27 10:28:51 +02:00
lib80211_crypt_wep.c	wifi: lib80211: Constify struct lib80211_crypto_ops	2024-08-27 10:28:51 +02:00
lib80211.c	wifi: lib80211: Constify struct lib80211_crypto_ops	2024-08-27 10:28:51 +02:00
Makefile	kbuild: use $(src) instead of $(srctree)/$(src) for source directory	2024-05-10 04:34:52 +09:00
mesh.c	wifi: cfg80211: move DFS related members to links[] in wireless_dev	2024-09-06 13:01:05 +02:00
mlme.c	wifi: cfg80211/mac80211: use proper link ID for DFS	2024-09-06 13:01:05 +02:00
nl80211.c	genetlink: hold RCU in genlmsg_mcast()	2024-10-15 17:52:58 -07:00
nl80211.h	wifi: nl80211: clean up coalescing rule handling	2024-05-29 10:38:53 +02:00
ocb.c	wifi: cfg80211: remove wdev mutex	2023-09-11 11:27:23 +02:00
of.c
pmsr.c	wifi: nl80211: remove the FTMs per burst limit for NDP ranging	2024-06-12 13:04:25 +02:00
radiotap.c	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
rdev-ops.h	wifi: cfg80211: handle DFS per link	2024-09-06 13:01:05 +02:00
reg.c	wifi: cfg80211: handle DFS per link	2024-09-06 13:01:05 +02:00
reg.h	wifi: cfg80211: add return docs for regulatory functions	2024-04-19 10:29:08 +02:00
scan.c	wifi: cfg80211: Do not create BSS entries for unsupported channels	2024-10-08 21:15:51 +02:00
sme.c	wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors	2024-09-09 11:43:21 +02:00
sysfs.c	wifi: cfg80211: fully move wiphy work to unbound workqueue	2024-05-29 15:23:33 +02:00
sysfs.h
trace.c
trace.h	wifi: cfg80211: handle DFS per link	2024-09-06 13:01:05 +02:00
util.c	wifi: cfg80211: Use kmemdup_array instead of kmemdup for multiple allocation	2024-08-27 10:28:56 +02:00
wext-compat.c	wifi: cfg80211: wext: convert return value to kernel-doc	2023-10-23 11:45:17 +02:00
wext-compat.h	wifi: cfg80211: Avoid clashing function prototypes	2022-11-16 11:31:47 +02:00
wext-core.c	wifi: cfg80211: add a flag to disable wireless extensions	2024-03-25 15:23:06 +01:00
wext-priv.c
wext-proc.c
wext-sme.c	wifi: cfg80211: remove wdev mutex	2023-09-11 11:27:23 +02:00
wext-spy.c	wireless: wext-spy: Fix out-of-bounds warning	2021-06-23 10:57:17 +02:00