diff options
| author | Deepanshu Kartikey <kartikey406@gmail.com> | 2026-03-13 12:24:17 +0300 |
|---|---|---|
| committer | Johannes Berg <johannes.berg@intel.com> | 2026-03-13 16:51:38 +0300 |
| commit | 7d73872d949c488a1d7c308031d6a9d89b5e0a8b (patch) | |
| tree | 22ef920b3720ac6be45b72d92ec1a20ec6b21c28 /scripts/dummy-tools/python3 | |
| parent | 6dccbc9f3e1d38565dff7730d2b7d1e8b16c9b09 (diff) | |
| download | linux-7d73872d949c488a1d7c308031d6a9d89b5e0a8b.tar.xz | |
wifi: mac80211: check tdls flag in ieee80211_tdls_oper
When NL80211_TDLS_ENABLE_LINK is called, the code only checks if the
station exists but not whether it is actually a TDLS station. This
allows the operation to proceed for non-TDLS stations, causing
unintended side effects like modifying channel context and HT
protection before failing.
Add a check for sta->sta.tdls early in the ENABLE_LINK case, before
any side effects occur, to ensure the operation is only allowed for
actual TDLS peers.
Reported-by: syzbot+56b6a844a4ea74487b7b@syzkaller.appspotmail.com
Closes: https://syzkaller.appspot.com/bug?extid=56b6a844a4ea74487b7b
Tested-by: syzbot+56b6a844a4ea74487b7b@syzkaller.appspotmail.com
Suggested-by: Johannes Berg <johannes@sipsolutions.net>
Signed-off-by: Deepanshu Kartikey <kartikey406@gmail.com>
Link: https://patch.msgid.link/20260313092417.520807-1-kartikey406@gmail.com
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Diffstat (limited to 'scripts/dummy-tools/python3')
0 files changed, 0 insertions, 0 deletions