linux-yocto/net
Johannes Berg 5aebb9aa53 wifi: mac80211: drop invalid source address OCB frames
[ Upstream commit d1b1a5eb27 ]

In OCB, don't accept frames from invalid source addresses
(and in particular don't try to create stations for them),
drop the frames instead.

Reported-by: syzbot+8b512026a7ec10dcbdd9@syzkaller.appspotmail.com
Closes: https://lore.kernel.org/r/6788d2d9.050a0220.20d369.0028.GAE@google.com/
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Tested-by: syzbot+8b512026a7ec10dcbdd9@syzkaller.appspotmail.com
Link: https://patch.msgid.link/20250616171838.7433379cab5d.I47444d63c72a0bd58d2e2b67bb99e1fea37eec6f@changeid
Signed-off-by: Johannes Berg <johannes.berg@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-07-10 16:03:16 +02:00
..
6lowpan
9p 9p/net: fix improper handling of bogus negative read/write replies 2025-05-02 07:50:56 +02:00
802
8021q net: vlan: don't propagate flags on open 2025-04-25 10:45:16 +02:00
appletalk
atm atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). 2025-07-06 11:00:12 +02:00
ax25 ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt 2025-02-21 13:57:06 +01:00
batman-adv batman-adv: Ignore own maximum aggregation size during RX 2025-03-28 21:59:55 +01:00
bluetooth Bluetooth: hci_core: Fix use-after-free in vhci_flush() 2025-07-10 16:03:13 +02:00
bpf bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() 2025-02-27 04:10:50 -08:00
bpfilter
bridge net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions 2025-06-27 11:08:55 +01:00
caif
can can: bcm: add missing rcu read protection for procfs content 2025-06-04 14:42:19 +02:00
ceph
core net: selftests: fix TCP packet checksum 2025-07-06 11:00:12 +02:00
dcb
dccp
devlink
dns_resolver
dsa net: dsa: tag_brcm: legacy: fix pskb_may_pull length 2025-06-19 15:28:33 +02:00
ethernet
ethtool net: ethtool: Don't call .cleanup_data when prepare_data fails 2025-04-25 10:45:07 +02:00
handshake
hsr net: hsr: fix fill_frame_info() regression vs VLAN packets 2025-02-08 09:52:32 +01:00
ieee802154 net: Rename mono_delivery_time to tstamp_type for scalabilty 2025-05-09 09:43:57 +02:00
ife
ipv4 tcp: fix passive TFO socket having invalid NAPI ID 2025-06-27 11:09:02 +01:00
ipv6 Revert "ipv6: save dontfrag in cork" 2025-07-06 11:00:16 +02:00
iucv
kcm
key
l2tp
l3mdev
lapb
llc llc: fix data loss when reading from a socket in llc_ui_recvmsg() 2025-06-04 14:42:20 +02:00
mac80211 wifi: mac80211: drop invalid source address OCB frames 2025-07-10 16:03:16 +02:00
mac802154
mctp net: mctp: Ensure keys maintain only one ref to corresponding dev 2025-05-22 14:12:16 +02:00
mpls mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). 2025-06-27 11:09:02 +01:00
mptcp mptcp: sockopt: fix getting freebind & transparent 2025-04-25 10:45:54 +02:00
ncsi net: ncsi: Fix GCPS 64-bit member variables 2025-06-19 15:28:10 +02:00
netfilter netfilter: nf_nat: also check reverse tuple to obtain clashing entry 2025-06-19 15:28:34 +02:00
netlabel calipso: unlock rcu before returning -EAFNOSUPPORT 2025-06-19 15:28:46 +02:00
netlink
netrom
nfc NFC: nci: uart: Set tty->disc_data only in success path 2025-06-27 11:08:48 +01:00
nsh
openvswitch net: openvswitch: Fix the dead loop of MPLS parse 2025-06-19 15:28:19 +02:00
packet
phonet
psample
qrtr
rds
rfkill
rose rose: fix dangling neighbour pointers in rose_rt_device_down() 2025-07-10 16:03:11 +02:00
rxrpc rxrpc: rxperf: Fix missing decoding of terminal magic cookie 2025-03-07 16:45:38 +01:00
sched net/sched: Always pass notifications when child class becomes empty 2025-07-10 16:03:12 +02:00
sctp sctp: Do not wake readers in __sctp_write_space() 2025-06-27 11:08:53 +01:00
smc net/smc: use the correct ndev to find pnetid by pnetid table 2025-06-04 14:41:59 +02:00
strparser strparser: Add read_sock callback 2025-02-27 04:10:50 -08:00
sunrpc sunrpc: don't immediately retransmit on seqno miss 2025-07-06 11:00:05 +02:00
switchdev net: switchdev: Convert blocking notification chain to a raw one 2025-03-22 12:50:39 -07:00
tipc tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer 2025-06-27 11:09:02 +01:00
tls ktls, sockmap: Fix missing uncharge operation 2025-06-19 15:28:15 +02:00
unix af_unix: Don't set -ECONNRESET for consumed OOB skb. 2025-07-06 11:00:12 +02:00
vmw_vsock vsock/vmci: Clear the vmci transport packet properly when initializing it 2025-07-10 16:03:04 +02:00
wireless wifi: cfg80211: init wiphy_work before allocating rfkill fails 2025-06-27 11:09:00 +01:00
x25
xdp xsk: fix an integer overflow in xp_create_and_assign_umem() 2025-03-28 21:59:55 +01:00
xfrm xfrm: Use xdo.dev instead of xdo.real_dev 2025-06-19 15:28:11 +02:00
compat.c
devres.c
Kconfig
Kconfig.debug
Makefile af_unix: Remove CONFIG_UNIX_SCM. 2025-06-04 14:42:22 +02:00
socket.c
sysctl_net.c