Johannes Berg d5fee261df wifi: cfg80211: clear wdev->cqm_config pointer on free ... When we free wdev->cqm_config when unregistering, we also need to clear out the pointer since the same wdev/netdev may get re-registered in another network namespace, then destroyed later, running this code again, which results in a double-free. Reported-by: syzbot+36218cddfd84b5cc263e@syzkaller.appspotmail.com Fixes: 37c20b2eff ("wifi: cfg80211: fix cqm_config access race") Cc: stable@vger.kernel.org Link: https://patch.msgid.link/20241022161742.7c34b2037726.I121b9cdb7eb180802eafc90b493522950d57ee18@changeid Signed-off-by: Johannes Berg <johannes.berg@intel.com>		2024-10-25 17:53:40 +02:00
..
certs
tests
.gitignore
ap.c
chan.c
core.c	wifi: cfg80211: clear wdev->cqm_config pointer on free	2024-10-25 17:53:40 +02:00
core.h	wifi: cfg80211: skip indicating signal for per-STA profile BSSs	2024-09-06 12:56:33 +02:00
debugfs.c
debugfs.h
ethtool.c
ibss.c	wifi: cfg80211: move DFS related members to links[] in wireless_dev	2024-09-06 13:01:05 +02:00
Kconfig
lib80211.c
lib80211_crypt_ccmp.c
lib80211_crypt_tkip.c
lib80211_crypt_wep.c
Makefile
mesh.c	wifi: cfg80211: move DFS related members to links[] in wireless_dev	2024-09-06 13:01:05 +02:00
mlme.c	wifi: cfg80211/mac80211: use proper link ID for DFS	2024-09-06 13:01:05 +02:00
nl80211.c	genetlink: hold RCU in genlmsg_mcast()	2024-10-15 17:52:58 -07:00
nl80211.h
ocb.c
of.c
pmsr.c
radiotap.c	move asm/unaligned.h to linux/unaligned.h	2024-10-02 17:23:23 -04:00
rdev-ops.h	wifi: cfg80211: handle DFS per link	2024-09-06 13:01:05 +02:00
reg.c	wifi: cfg80211: handle DFS per link	2024-09-06 13:01:05 +02:00
reg.h
scan.c	wifi: cfg80211: Do not create BSS entries for unsupported channels	2024-10-08 21:15:51 +02:00
sme.c	wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors	2024-09-09 11:43:21 +02:00
sysfs.c
sysfs.h
trace.c
trace.h	wifi: cfg80211: handle DFS per link	2024-09-06 13:01:05 +02:00
util.c
wext-compat.c
wext-compat.h
wext-core.c
wext-priv.c
wext-proc.c
wext-sme.c
wext-spy.c