[PATCH 18.06] mac80211: Backport fixes for Kr00k vulnerabilities

[Hauke Mehrtens]

On 8/29/20 2:02 PM, Baptiste Jonglez wrote:
> On 28-08-20, Hauke Mehrtens wrote:
>> This backports some fixes from kernel 5.6 and 4.14.175.
> 
> Thanks, I will give this a try.
> 
> It's missing two fixes though:
> 
> 5981fe5b0529 ("mac80211: fix misplaced while instead of if")

I will add this one to 18.06 and 19.07. The others should be in 19.07
already.

> a0761a301746 ("mac80211: drop data frames without key on encrypted links")

This does not apply to kernel < 5.4, see here:
https://lore.kernel.org/linux-wireless/20200327150342.252AF20748@mail.kernel.org/

We could try to make it apply somehow.

> The second one has strangely not been backported to stable kernels, even
> though it says "Cc: stable at vger.kernel.org".  I'm not sure what we should
> do with it.
> 
> Baptiste
>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openwrt.org/pipermail/openwrt-devel/attachments/20200829/1c2b75bf/attachment.sig>