Lorenzo BianconiandFelix Fietkau aee736a27e wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() ...

Check frame length before accessing the mgmt fields in
mt7996_mac_write_txwi_80211 in order to avoid a possible oob access.

Fixes: 98686cd21624c ("wifi: mt76: mt7996: add driver for MediaTek Wi-Fi 7 (802.11be) devices")
Signed-off-by: Lorenzo Bianconi <[email protected]>
Link: https://patch.msgid.link/[email protected]
Signed-off-by: Felix Fietkau <[email protected]>

2026-03-01 16:46:52 +00:00

..

coredump.c

wifi: mt76: relicense to BSD-3-Clause-Clear

2025-10-13 11:11:19 +02:00

coredump.h

wifi: mt76: relicense to BSD-3-Clause-Clear

2025-10-13 11:11:19 +02:00

debugfs.c

wifi: mt76: mt7996: fix out-of-bounds array access during hardware restart

2026-01-28 12:38:03 +00:00

dma.c

wifi: mt76: mt7996: Do not schedule RRO and TxFree queues during reset for NPU

2026-01-27 11:56:18 +00:00

eeprom.c

wifi: mt76: mt7996: add variant for MT7992 chipsets

2026-02-21 08:56:45 +00:00

eeprom.h

wifi: mt76: relicense to BSD-3-Clause-Clear

2025-10-13 11:11:19 +02:00

init.c

wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work()

2026-02-21 09:48:00 +00:00

Kconfig

wifi: mt76: mt7996: Add NPU offload support to MT7996 driver

2025-10-30 11:54:43 +00:00

mac.c

wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()

2026-03-01 16:46:52 +00:00

mac.h

wifi: mt76: mt7996: offload radar threshold initialization

2026-01-27 10:02:43 +00:00

main.c

wifi: mt76: mt7996: Disable Rx hdr_trans in monitor mode

2026-02-21 11:00:50 +00:00

Makefile

wifi: mt76: mt7996: Add NPU offload support to MT7996 driver

2025-10-30 11:54:43 +00:00

mcu.c

wifi: mt76: mt7996: Add eMLSR support

2026-02-21 09:48:00 +00:00

mcu.h

wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event

2026-02-21 09:31:54 +00:00

mmio.c

wifi: mt76: mt7996: Add NPU offload support to MT7996 driver

2025-10-30 11:54:43 +00:00

mt7996.h

wifi: mt76: mt7996: Add eMLSR support

2026-02-21 09:48:00 +00:00

npu.c

wifi: mt76: mt7996: Store DMA mapped buffer addresses in mt7996_npu_hw_init()

2026-01-27 11:56:18 +00:00

pci.c

wifi: mt76: mt7996: fix typos in comments

2025-10-30 11:54:43 +00:00

regs.h

wifi: mt76: mt7996: Disable Rx hdr_trans in monitor mode

2026-02-21 11:00:50 +00:00