Tristan Madani a035766f97 wifi: b43legacy: enforce bounds check on firmware key index in RX path ...

Same fix as b43: the firmware-controlled key index in b43legacy_rx()
can exceed dev->max_nr_keys. The existing B43legacy_WARN_ON is
non-enforcing in production builds, allowing an out-of-bounds read of
dev->key[].

Make the check enforcing by dropping the frame for invalid indices.

Fixes: 75388acd0c ("[B43LEGACY]: add mac80211-based driver for legacy BCM43xx devices")
Cc: [email protected]
Signed-off-by: Tristan Madani <[email protected]>
Link: https://patch.msgid.link/[email protected]
Signed-off-by: Johannes Berg <[email protected]>

2026-04-27 12:39:57 +02:00

..

b43

wifi: b43: enforce bounds check on firmware key index in b43_rx()

2026-04-27 12:39:57 +02:00

b43legacy

wifi: b43legacy: enforce bounds check on firmware key index in RX path

2026-04-27 12:39:57 +02:00

brcm80211

wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task

2026-04-27 12:37:54 +02:00

Kconfig

…

Makefile

…