Felix Fietkau f66cff22fb wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV ...

When a CSA countdown is active, mt7996_mcu_beacon_cntdwn() emits two
bss_bcn_cntdwn_tlv entries (the CSA countdown and the CCA-abort BCC), but
MT7996_BEACON_UPDATE_SIZE only reserved one. With MBSSID enabled and a
near-maximum beacon template the extra 8 bytes could push the offload
command past MT7996_MAX_BSS_OFFLOAD_SIZE and trigger skb_over_panic().
Reserve room for both countdown TLVs.

Fixes: 98686cd21624 ("wifi: mt76: mt7996: add driver for MediaTek Wi-Fi 7 (802.11be) devices")
Signed-off-by: Felix Fietkau <[email protected]>

2026-07-24 14:45:39 +02:00

..

coredump.c

wifi: mt76: relicense to BSD-3-Clause-Clear

2025-10-13 11:11:19 +02:00

coredump.h

wifi: mt76: relicense to BSD-3-Clause-Clear

2025-10-13 11:11:19 +02:00

debugfs.c

wifi: mt76: mt7996: HW ATF support

2026-06-30 09:55:10 +02:00

dma.c

wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996_init_tx_queues()

2026-05-28 11:16:16 +02:00

eeprom.c

wifi: mt76: mt7996: validate default EEPROM firmware size

2026-07-21 12:38:45 +02:00

eeprom.h

wifi: mt76: relicense to BSD-3-Clause-Clear

2025-10-13 11:11:19 +02:00

init.c

wifi: mt76: mt7996: fix capability of EHT-MCS 15 in MRU

2026-07-22 09:49:38 +02:00

Kconfig

wifi: mt76: mt7996: Add NPU offload support to MT7996 driver

2025-10-30 11:54:43 +00:00

mac.c

wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode

2026-07-24 14:45:39 +02:00

mac.h

wifi: mt76: mt7996: offload radar threshold initialization

2026-01-27 10:02:43 +00:00

main.c

wifi: mt76: mt7996: don't report a zero TX bitrate

2026-07-22 10:51:04 +02:00

Makefile

wifi: mt76: mt7996: Add NPU offload support to MT7996 driver

2025-10-30 11:54:43 +00:00

mcu.c

wifi: mt76: decode the full VHT Rx STBC capability field

2026-07-24 14:45:39 +02:00

mcu.h

wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV

2026-07-24 14:45:39 +02:00

mmio.c

wifi: mt76: mt7996: handle UNI PS sync events

2026-05-07 08:39:05 +00:00

mt7996.h

wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP

2026-07-22 10:51:04 +02:00

npu.c

wifi: mt76: mt7996: Store DMA mapped buffer addresses in mt7996_npu_hw_init()

2026-01-27 11:56:18 +00:00

pci.c

wifi: mt76: mt7996: remove redundant pdev->bus check in probe

2026-06-02 11:54:17 +02:00

regs.h

wifi: mt76: mt7996: update WFSYS reset flow for MT7990 chipsets

2026-03-14 08:32:20 +00:00