On Wed, 02 Apr 2025 23:35:43 +0530, P Praneesh wrote:
> While forming the 802.11 header from the rx descriptor, skb_push() is
> performed for the 802.11 header length and then calls
> ath12k_dp_rx_desc_get_dot11_hdr(). Since skb_push() moves the skb->data
> pointer backwards by the 802.11 header length, the rx descriptor points to
> a different memory area than intended, causing invalid information to be
> fetched from the rx descriptor.
>
> [...]
Applied, thanks!
[1/1] wifi: ath12k: Fix invalid memory access while forming 802.11 header
commit: be908d2360341f8bbc982fff5a5e4f8030c17f74
Best regards,
--
Jeff Johnson <jeff.johnson@xxxxxxxxxxxxxxxx>
