Hi, So somehow this time around we ended up with a larger than usual set of fixes - see below. Please pull and let me know if there's any problem. Thanks, johannes The following changes since commit 977d293e23b48a1129830d7968605f61c4af71a0: mptcp: ensure tx skbs always have the MPTCP ext (2021-09-22 14:39:41 +0100) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211.git tags/mac80211-for-net-2021-09-27 for you to fetch changes up to 33092aca857bf35a8e9cac0e8340c685a4796e90: mac80211: Fix Ptk0 rekey documentation (2021-09-27 12:02:54 +0200) ---------------------------------------------------------------- Some fixes: * potential use-after-free in CCMP/GCMP RX processing * potential use-after-free in TX A-MSDU processing * revert to low data rates for no-ack as the commit broke other things * limit VHT MCS/NSS in radiotap injection * drop frames with invalid addresses in IBSS mode * check rhashtable_init() return value in mesh * fix potentially unaligned access in mesh * fix late beacon hrtimer handling in hwsim (syzbot) * fix documentation for PTK0 rekeying ---------------------------------------------------------------- Alexander Wetzel (1): mac80211: Fix Ptk0 rekey documentation Chih-Kang Chang (1): mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug Felix Fietkau (1): Revert "mac80211: do not use low data rates for data frames with no ack flag" Johannes Berg (3): mac80211: mesh: fix potentially unaligned access mac80211-hwsim: fix late beacon hrtimer handling mac80211: fix use-after-free in CCMP/GCMP RX Lorenzo Bianconi (1): mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap MichelleJin (1): mac80211: check return value of rhashtable_init YueHaibing (1): mac80211: Drop frames from invalid MAC address in ad-hoc mode drivers/net/wireless/mac80211_hwsim.c | 4 ++-- include/net/mac80211.h | 8 ++++---- net/mac80211/mesh_pathtbl.c | 5 ++++- net/mac80211/mesh_ps.c | 3 ++- net/mac80211/rate.c | 4 ---- net/mac80211/rx.c | 3 ++- net/mac80211/tx.c | 12 ++++++++++++ net/mac80211/wpa.c | 6 ++++++ 8 files changed, 32 insertions(+), 13 deletions(-)