Re: [PATCH v3] staging: rtl8192u: ieee80211_rx: free rxb on reorder alloc failure

Re: [PATCH v3] staging: rtl8192u: ieee80211_rx: free rxb on reorder alloc failure

[Greg KH]

On Fri, Feb 13, 2026 at 08:48:34AM -0500, Yuho Choi wrote:
> RxReorderIndicatePacket() allocates prxbIndicateArray with kmalloc_array().
> If the allocation fails, the function returns without freeing the incoming
> prxb and its subframes.
> 
> With JOHN_NOCPY enabled, this leaks the original skb as well because skb
> ownership is transferred to rxb->subframes[] and ieee80211_rx() does not
> free skb in that configuration.
> 
> Free all prxb->subframes[] and prxb before returning on the allocation
> failure path.
> 
> Signed-off-by: Yuho Choi <yqc5929@psu.edu>
> ---
> Changes since v2:
> - Included this changelog as requested to document version history.
> 
> Changes since v1:
> - Corrected the sender's email address, which was misconfigured in the initial submission.
> 
>  drivers/staging/rtl8192u/ieee80211/ieee80211_rx.c | 8 +++++++-

This file is not in 7.0-rc1 at all, what branch did you make this
against?

thanks,

greg k-h