v3: - further improvements for fix for use-after-free in rtw89_core_tx_kick_off_and_wait(), see changelog below --- in the patch - add patch 3/5 for USB case v2: https://lore.kernel.org/linux-wireless/20250827120603.723548-1-pchelkin@xxxxxxxxx/ - rework fix for use-after-free in rtw89_core_tx_kick_off_and_wait() (Zong-Zhe) - add patches 2/4 and 3/4 for another issues discovered while reworking - use rtw tree instead of rtw-next v1: https://lore.kernel.org/linux-wireless/20250820141441.106156-1-pchelkin@xxxxxxxxx/ Fedor Pchelkin (5): wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() wifi: rtw89: fix tx_wait initialization race wifi: rtw89: perform tx_wait completions for USB part wifi: rtw89: fix leak in rtw89_core_send_nullfunc() wifi: rtw89: avoid circular locking dependency in ser_state_run() drivers/net/wireless/realtek/rtw89/core.c | 57 ++++++++++++++++------- drivers/net/wireless/realtek/rtw89/core.h | 38 +++++++++++++++- drivers/net/wireless/realtek/rtw89/pci.c | 5 +- drivers/net/wireless/realtek/rtw89/ser.c | 5 +- drivers/net/wireless/realtek/rtw89/usb.c | 36 ++++++++------ 5 files changed, 105 insertions(+), 36 deletions(-) -- 2.51.0