Miri Korenblit 75d262ad3c wifi: cfg80211: cancel wiphy_work before freeing wiphy ...

[ Upstream commit 72d520476a ]

A wiphy_work can be queued from the moment the wiphy is allocated and
initialized (i.e. wiphy_new_nm). When a wiphy_work is queued, the
rdev::wiphy_work is getting queued.

If wiphy_free is called before the rdev::wiphy_work had a chance to run,
the wiphy memory will be freed, and then when it eventally gets to run
it'll use invalid memory.

Fix this by canceling the work before freeing the wiphy.

Fixes: a3ee4dc84c ("wifi: cfg80211: add a work abstraction with special semantics")
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Reviewed-by: Johannes Berg <johannes.berg@intel.com>
Link: https://patch.msgid.link/20250306123626.efd1d19f6e07.I48229f96f4067ef73f5b87302335e2fd750136c9@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-03-22 12:50:38 -07:00

..

certs

wifi: cfg80211: fix certs build to not depend on file order

2024-01-01 12:42:39 +00:00

.gitignore

…

ap.c

wifi: nl80211: add MLO_LINK_ID to CMD_STOP_AP event

2023-02-14 12:09:17 +01:00

chan.c

wifi: cfg80211: move puncturing bitmap validation from mac80211

2023-02-14 12:09:18 +01:00

core.c

wifi: cfg80211: cancel wiphy_work before freeing wiphy

2025-03-22 12:50:38 -07:00

core.h

Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"

2024-09-30 16:25:14 +02:00

debugfs.c

wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()

2022-08-25 10:04:46 +02:00

debugfs.h

…

ethtool.c

wifi: cfg80211: use strscpy to replace strlcpy

2022-07-15 11:43:12 +02:00

ibss.c

wifi: cfg80211: remove support for static WEP

2023-01-18 17:31:44 +01:00

Kconfig

cfg80211: select CONFIG_CRC32

2021-01-05 15:50:36 -08:00

lib80211_crypt_ccmp.c

wifi: use struct_group to copy addresses

2022-09-03 16:40:06 +02:00

lib80211_crypt_tkip.c

mm, treewide: rename kzfree() to kfree_sensitive()

2020-08-07 11:33:22 -07:00

lib80211_crypt_wep.c

mm, treewide: rename kzfree() to kfree_sensitive()

2020-08-07 11:33:22 -07:00

lib80211.c

lib80211: Remove unused macro DRV_NAME

2020-09-18 11:53:00 +02:00

Makefile

cfg80211: fix CONFIG_CFG80211_EXTRA_REGDB_KEYDIR typo

2022-03-01 14:10:14 +01:00

mesh.c

wifi: cfg80211: do some rework towards MLO link APIs

2022-06-20 12:54:58 +02:00

mlme.c

wifi: cfg80211: fix assoc response warning on failed links

2023-10-23 13:25:30 +02:00

nl80211.c

wifi: nl80211: reject cooked mode if it is set along with other flags

2025-03-13 12:58:26 +01:00

nl80211.h

wifi: nl80211: Remove unused declaration nl80211_pmsr_dump_results()

2023-08-22 21:40:40 +02:00

ocb.c

wifi: cfg80211: ocb: don't leave if not joined

2023-08-22 21:40:39 +02:00

of.c

…

pmsr.c

wifi: cfg80211: pmsr: use correct nla_get_uX functions

2024-06-21 14:38:12 +02:00

radiotap.c

mac80211: Use flex-array for radiotap header bitmap

2021-08-13 09:58:25 +02:00

rdev-ops.h

wifi: cfg80211: fix 6 GHz scan request building

2024-07-25 09:50:41 +02:00

reg.c

wifi: cfg80211: regulatory: improve invalid hints checking

2025-03-13 12:58:26 +01:00

reg.h

cfg80211: avoid holding the RTNL when calling the driver

2021-01-26 11:55:50 +01:00

scan.c

wifi: cfg80211: adjust allocation of colocated AP data

2025-02-08 09:52:01 +01:00

sme.c

wifi: cfg80211: sme: init n_channels before channels[] access

2024-12-19 18:11:27 +01:00

sysfs.c

wifi: cfg80211: fully move wiphy work to unbound workqueue

2024-06-21 14:38:12 +02:00

sysfs.h

…

trace.c

…

trace.h

wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class

2024-06-12 11:11:22 +02:00

util.c

wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()

2024-08-03 08:53:39 +02:00

wext-compat.c

wifi: cfg80211: remove support for static WEP

2023-01-18 17:31:44 +01:00

wext-compat.h

wifi: cfg80211: Avoid clashing function prototypes

2022-11-16 11:31:47 +02:00

wext-core.c

wifi: cfg80211: add a flag to disable wireless extensions

2024-04-03 15:28:54 +02:00

wext-priv.c

…

wext-proc.c

…

wext-sme.c

wifi: cfg80211: wext: hold wiphy lock in siwgenie

2023-06-07 19:53:11 +02:00

wext-spy.c

wireless: wext-spy: Fix out-of-bounds warning

2021-06-23 10:57:17 +02:00