You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
0f1b5ce2f5
If we know that we have an encrypted link (based on having had a key configured for TX in the past) then drop all data frames in the key selection handler if there's no key anymore. This fixes an issue with mac80211 internal TXQs - there we can buffer frames for an encrypted link, but then if the key is no longer there when they're dequeued, the frames are sent without encryption. This happens if a station is disconnected while the frames are still on the TXQ. Detecting that a link should be encrypted based on a first key having been configured for TX is fine as there are no use cases for a connection going from with encryption to no encryption. With extended key IDs, however, there is a case of having a key configured for only decryption, so we can't just trigger this behaviour on a key being configured. Cc: stable@vger.kernel.org Reported-by: Jouni Malinen <j@w1.fi> Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: Luca Coelho <luciano.coelho@intel.com> Signed-off-by: David Bauer <mail@david-bauer.net> |
4 years ago | |
---|---|---|
.. | ||
acx-mac80211 | 4 years ago | |
ath10k-ct | 4 years ago | |
bcm27xx-gpu-fw | 4 years ago | |
broadcom-wl | 4 years ago | |
button-hotplug | 4 years ago | |
cryptodev-linux | 4 years ago | |
dtc/patches | 7 years ago | |
gpio-button-hotplug | 4 years ago | |
gpio-nct5104d | 4 years ago | |
hwmon-gsc | 4 years ago | |
i2c-gpio-custom | 4 years ago | |
kmod-sched-cake-oot | 4 years ago | |
lantiq | 4 years ago | |
leds-apu2 | 4 years ago | |
linux | 4 years ago | |
mac80211 | 4 years ago | |
mt76 | 4 years ago | |
mwlwifi | 4 years ago | |
nat46 | 4 years ago | |
om-watchdog | 5 years ago | |
rtc-rv5c386a | 4 years ago | |
rtl8812au-ct | 4 years ago | |
spi-gpio-custom | 4 years ago | |
trelay | 4 years ago | |
w1-gpio-custom | 4 years ago |