On Mon, 21 Jul 2025 11:47:49 +0530, Sarika Sharma wrote: > Currently, if any error occurs during ath12k_dp_rx_peer_tid_setup(), > the tid value is already incremented, even though the corresponding > TID is not actually allocated. Proceed to > ath12k_dp_rx_peer_tid_delete() starting from unallocated tid, > which might leads to freeing unallocated TID and cause potential > crash or out-of-bounds access. > > [...] Applied, thanks! [1/1] wifi: ath12k: Correct tid cleanup when tid setup fails commit: 4a2bf707270f897ab8077baee8ed5842a5321686 Best regards, -- Jeff Johnson <jeff.johnson@xxxxxxxxxxxxxxxx>