Johannes Berg <johannes@xxxxxxxxxxxxxxxx> writes: > From: Jouni Malinen <jouni@xxxxxxxxxxxxxx> > > mac80211 used to check port authorization in the Data frame enqueue case > when going through start_xmit(). However, that authorization status may > change while the frame is waiting in a queue. Add a similar check in the > dequeue case to avoid sending previously accepted frames after > authorization change. This provides additional protection against > potential leaking of frames after a station has been disconnected and > the keys for it are being removed. > > Cc: stable@xxxxxxxxxxxxxxx > Signed-off-by: Jouni Malinen <jouni@xxxxxxxxxxxxxx> > Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx> Ah - nice find! Acked-by: Toke Høiland-Jørgensen <toke@xxxxxxxxxx>
