]> git.baikalelectronics.ru Git - kernel.git/commit
wifi: cfg80211: Fix use after free for wext
authorAlexander Wetzel <alexander@wetzel-home.de>
Tue, 24 Jan 2023 14:18:56 +0000 (15:18 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 10 Mar 2023 08:34:22 +0000 (09:34 +0100)
commit7b91a87b284310b1351b133fdc708caa7ed17470
treea8481f388a2edd88dffa37f4ec5d34fb7b689e75
parentf8b3b859546bcc0d3a1c18411ada1d025659b719
wifi: cfg80211: Fix use after free for wext

commit 412cef6df3742f591e752b3d703bc6a68e892100 upstream.

Key information in wext.connect is not reset on (re)connect and can hold
data from a previous connection.

Reset key data to avoid that drivers or mac80211 incorrectly detect a
WEP connection request and access the freed or already reused memory.

Additionally optimize cfg80211_sme_connect() and avoid an useless
schedule of conn_work.

Fixes: 81cbe2ab679f ("cfg80211: rework key operation")
Cc: stable@vger.kernel.org
Link: https://lore.kernel.org/r/20230124141856.356646-1-alexander@wetzel-home.de
Signed-off-by: Alexander Wetzel <alexander@wetzel-home.de>
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/wireless/sme.c