Felix Fietkau a47ad19275 wifi: mt76: mt7996: fix out-of-bounds array access during hardware restart ...

During hardware restart, link_id can be IEEE80211_LINK_UNSPECIFIED,
causing an out-of-bounds array access on msta->link[].

Add mt7996_sta_link() and mt7996_sta_link_protected() helper functions
for accessing sta links with proper RCU handling and bounds checking.
Use them for any sta link RCU access.

Reported-by: Chad Monroe <[email protected]>
Signed-off-by: Felix Fietkau <[email protected]>

2026-01-28 12:38:03 +00:00

..

coredump.c

wifi: mt76: relicense to BSD-3-Clause-Clear

2025-10-13 11:11:19 +02:00

coredump.h

wifi: mt76: relicense to BSD-3-Clause-Clear

2025-10-13 11:11:19 +02:00

debugfs.c

wifi: mt76: mt7996: fix out-of-bounds array access during hardware restart

2026-01-28 12:38:03 +00:00

dma.c

wifi: mt76: mt7996: Do not schedule RRO and TxFree queues during reset for NPU

2026-01-27 11:56:18 +00:00

eeprom.c

wifi: mt76: relicense to BSD-3-Clause-Clear

2025-10-13 11:11:19 +02:00

eeprom.h

wifi: mt76: relicense to BSD-3-Clause-Clear

2025-10-13 11:11:19 +02:00

init.c

wifi: mt76: mt7996: increase txq memory limit to 32 MiB

2026-01-27 12:25:27 +00:00

Kconfig

wifi: mt76: mt7996: Add NPU offload support to MT7996 driver

2025-10-30 11:54:43 +00:00

mac.c

wifi: mt76: mt7996: fix out-of-bounds array access during hardware restart

2026-01-28 12:38:03 +00:00

mac.h

wifi: mt76: mt7996: offload radar threshold initialization

2026-01-27 10:02:43 +00:00

main.c

wifi: mt76: mt7996: fix out-of-bounds array access during hardware restart

2026-01-28 12:38:03 +00:00

Makefile

wifi: mt76: mt7996: Add NPU offload support to MT7996 driver

2025-10-30 11:54:43 +00:00

mcu.c

wifi: mt76: mt7996: fix out-of-bounds array access during hardware restart

2026-01-28 12:38:03 +00:00

mcu.h

wifi: mt76: mt7996: add support for ERP CTS & HT protection

2026-01-27 11:11:14 +00:00

mmio.c

wifi: mt76: mt7996: Add NPU offload support to MT7996 driver

2025-10-30 11:54:43 +00:00

mt7996.h

wifi: mt76: mt7996: fix out-of-bounds array access during hardware restart

2026-01-28 12:38:03 +00:00

npu.c

wifi: mt76: mt7996: Store DMA mapped buffer addresses in mt7996_npu_hw_init()

2026-01-27 11:56:18 +00:00

pci.c

wifi: mt76: mt7996: fix typos in comments

2025-10-30 11:54:43 +00:00

regs.h

wifi: mt76: relicense to BSD-3-Clause-Clear

2025-10-13 11:11:19 +02:00