From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-dy2-f41.google.com (mail-dy2-f41.google.com [74.125.229.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 93A513D0903 for ; Tue, 29 Sep 2026 02:59:03 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=74.125.229.41 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1790650746; cv=none; b=n9Hv6RE6JWwOJlI4pPlQqVy4rvRU1ffnldoWdp6rVbiPLW5XVOiVlELMLE/wMlAz9DYNC6luNdTgOJsFv7y74SV4G60zL95KZKSgRBwwibnTw6/6NebDBjFX7cGU/Ih9HbTQn2CZsv62LUDRA5wwrxW4cICqr3SNELZnRXudLUU= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1790650746; c=relaxed/simple; bh=HJyTeXVijHdk4eWMa4QoVfAxeX/wDGbJNl64bB2L/eM=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=qhHOpLsyMV3KrXQLgq/wQx6nM8N7GEAptcSdrJ/8sVIg4jrUTqPj33D95l7BJK2Bix708WTy59UUhqM0ebFpmq7fCk0ZHQFiekCSojFRZUSHdh8X4/7Xrs6ECBRKtSFTkBdyv0kaZWxqD0nAn8DRd7nSBKh0qERJc/zBlKbxdNQ= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=trailofbits.com; spf=pass smtp.mailfrom=trailofbits.com; dkim=pass (2048-bit key) header.d=trailofbits.com header.i=@trailofbits.com header.b=adxscrNS; arc=none smtp.client-ip=74.125.229.41 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=trailofbits.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=trailofbits.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=trailofbits.com header.i=@trailofbits.com header.b="adxscrNS" Received: by mail-dy2-f41.google.com with SMTP id 5a478bee46e88-3468ec309afso1310320eec.3 for ; Mon, 28 Sep 2026 19:59:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=trailofbits.com; s=google; t=1790650742; x=1791255542; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=UFhWeC8nK54inRKs6I+y3KfLb6ie98THlXPGgVHMi+o=; b=adxscrNS0SZFlILvax0Rwzos3fkSpLC8i/kEVM/kXJ3D8ZD86ZQFb5k4bzeUy9/p+n jYDJLv+MggeJLPyBausWyooZaHjoTMxZDB5SImSzcvHM4tBwWHbwlvIQsds/7YekO0oy m/fqWezeDh0pOKZKNT7Fbet6NtOnAF2C5H72T6PUlci5PRGujDDrdZqucVDCFrB7OcyJ kCNxM9Uz42fVnW4K0ge6LNoYuP1NGuduAxO0fZ0SEJ5UqdWp0QMxbVIgo3cEikKmKI38 D0oYEi59FtEsbAUYOJokjBY4/XKRYhwcbaNAASh1RCxSU8tuP8hmWzH+y8k9sTXlA1TA YotQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1790650742; x=1791255542; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=UFhWeC8nK54inRKs6I+y3KfLb6ie98THlXPGgVHMi+o=; b=XLTEzoJJZd5ISHO5Q8SQ1Cglk0AzA/ifC5mcGkz4phCJOJ1qIgfzkbSUWTyBdjt9p1 y79Dl79R9PBWfIRkthRwDurMlDA9VMGPAE0/BI0ZrGL7FSMmoHQebZsXCjaXq52ZwYuy 1471EF5ugRt5ocZZU0dlIbNUjYVNnglOoJ+PNF/szVEpfzAekFR3dvYWUS9lq6v2daI+ uRhoHO5urKGrdRFE6T0BVtqOCGI2v5QWjP6UUgvWPTW/P79znRB+I/bjzRiac6CrrgI7 BT4FjSV6+vk8zKKYNKDDszpqBw+/MU9rymj00Tjplj6BMYGLb4ZD6b3urRilfVXoJJsx GW7g== X-Forwarded-Encrypted: i=1; AKwUvByS8rTUxKyAhF7+RzZEPWWFFCxTBwdl999Nzckg/lVtsithh219VxbliDZel+DNRoSW3iKZIMvMg2fWric=@vger.kernel.org X-Gm-Message-State: AFuF++lXbOa2InGSQ3NHMHJ1Nf6RJTTk/FqHpb+0MeZbd3Efzc6cimHi v50ClfSYW/33qroigfIW8tFW7mpQ3rcr/JmYGnUo+PqdO1KkK1Zm4zVzeqz4lBnJsKE= X-Gm-Gg: AYBFou0qbeghVlsInO3SUyXKWxIjoQBoxi3xNHW12jD2vydFnVrm41Iv5KNahBGo++G ALFaqeRD4Fph53pZV+8br5WLoWfP9mQ4mLMvyTY38UJ3jFOl5gL1aEnTqt8qzdpMNh5MEzKeS0Y telAvQc7PpFQQEOuHB9FVrsoyj/kJvdK+YLDvdDkZhqnjk6rdk4mNK4IOfRrAp4Yf7aPngMc0am J1gwF+EmEPjHVNYPql2DXkFEGutT4iDMG6qe0kdj7UBevPW3izJYcUG527UIrLYVpkWAa/0ycQ+ Lv1NJEk3KcS/sD3vsoZFqYkZegBLzqowP90pe+PsfEIycM7XigIvviJE+3Z4t5CDxQpfEpoz4RG Vgb4cgxCYRYJu6wWuT6nxW/HPTywrdf22hc4aeIJ5ivfhNwIZ/vxgFR+PILOIjOlVCAzoSPE4y6 HxKc7AvxeKwwmKxDK/gATyPrfsxIYv57nYc67JuL7im9Yx5VFV6CNuACaVzqUHXwNlmG/lTN6Vv W79sWdyNnMhBD7Ta2PxUXR87cRdmSNSdHD2z4Lg/YIlm1r5u/oKEJQZW256AY+QiSuo0goeejqH jQo+J8A= X-Received: by 2002:a05:7301:1f15:b0:33e:6bd8:8f1a with SMTP id 5a478bee46e88-3426cfdf68cmr15624231eec.0.1790650741745; Mon, 28 Sep 2026 19:59:01 -0700 (PDT) Received: from localhost.localdomain ([2603:8001:5f01:8bab:3481:cbb6:f339:9e4e]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-34571658054sm13111683eec.8.2026.09.28.19.59.00 (version=TLS1_3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256/256); Mon, 28 Sep 2026 19:59:01 -0700 (PDT) From: Artem Dinaburg To: stable@vger.kernel.org Cc: Artem Dinaburg , Greg Kroah-Hartman , Sasha Levin , Baochen Qiang , Kalle Valo , Jeff Johnson , ath12k@lists.infradead.org, linux-wireless@vger.kernel.org, linux-kernel@vger.kernel.org, quic_jjohnson@quicinc.com Subject: [PATCH 6.6.y 0/2] wifi: ath12k: backport CVE-2024-40979 fixes Date: Mon, 28 Sep 2026 22:58:52 -0400 Message-ID: <20260929025856.85683-1-artem@trailofbits.com> X-Mailer: git-send-email 2.55.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Hi Greg, Sasha, and wifi ath12k maintainers, These patches are a backport for CVE-2024-40979 on 6.6.y. The second patch depends on the first, so I kept the upstream ordering instead of folding either change into the other. Both patches are already present in 6.12.y, 6.18.y, and 7.2.y. Could you please queue this series for 6.6.y? AI assistance: An LLM helped identify, adapt, and validate these backports; I reviewed the resulting code and validation evidence. Thanks, Artem Series: 1. wifi: ath12k: fix kernel crash during resume 2. wifi: ath12k: check M3 buffer size as well whey trying to reuse it