mt76: mt7615: fix skb use-after-free on mac reset
authorFelix Fietkau <nbd@nbd.name>
Wed, 21 Jul 2021 05:23:46 +0000 (07:23 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 18 Nov 2021 18:15:59 +0000 (19:15 +0100)
commit37200a451d7e06776ed3a64ab85e5426f799dafc
treeae703be7d56435528c60399e6e6ed667b0a2f820
parentbc1e276eea3de20691468052ba4d1029c75b8b34
mt76: mt7615: fix skb use-after-free on mac reset

commit b5cd1fd6043bbb7c5810067b5f93f3016bfd8a6f upstream.

When clearing all existing pending tx slots, mt76_tx_complete_skb needs to
be used to free the skbs, to ensure that they are cleared from the status
list as well.

Cc: stable@vger.kernel.org
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/wireless/mediatek/mt76/mt7615/mac.c