[GIT PULL] wireless-2026-07-29

[Johannes Berg <johannes@sipsolutions.net>]

Hi,

So this week is _far_ less, thankfully. A couple more
fixes that seemed important enough, but I've also been
much more selective, in particular the 'mwifiex' driver
seems to be a train-wreck, and has a lot of fixes and
associated discussions still open - but I think I'll be
leaving those for -next.

Please pull and let us know if there's any problem.

Thanks,
johannes



The following changes since commit d326f83e819c53aa05c40d64f5805d6237b6aa1b:

  Merge tag 'net-7.2-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net (2026-07-23 12:58:08 -0700)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/wireless/wireless.git tags/wireless-2026-07-29

for you to fetch changes up to 57aa1718d5953dd532137d43b696c68545c2e0b3:

  wifi: iwlegacy: replace BUG_ON() with WARN_ON() on num_stations check (2026-07-28 15:35:37 +0200)

----------------------------------------------------------------
Much quieter, thankfully:
 - a set of ath12k fixes, including a recent
   MLO regression for WCN7850/QCC2072
 - iwlegacy gets rid of a BUG_ON that triggered
 - a couple more robustness/security fixes

----------------------------------------------------------------
Baochen Qiang (8):
      wifi: ath12k: fix out-of-bounds clear_bit in ath12k_mac_dp_peer_cleanup()
      wifi: ath12k: factor out peer assoc send-and-wait into a helper
      wifi: ath12k: keep ATH12K_PEER_ML_ID_VALID set in ath12k_sta::ml_peer_id
      wifi: ath12k: add support for HTT_T2H_MSG_TYPE_MLO_RX_PEER_MAP
      wifi: ath12k: introduce host_alloc_ml_id hardware parameter
      wifi: ath12k: do not advertise MLD peer ID for firmware-allocate devices
      wifi: ath12k: defer dp_peer registration when firmware allocates MLD peer ID
      wifi: ath12k: resolve PENDING ML peer ID from MLO_PEER_MAP HTT event

Deepanshu Kartikey (1):
      wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()

Johannes Berg (1):
      Merge tag 'ath-current-20260727' of git://git.kernel.org/pub/scm/linux/kernel/git/ath/ath

Stanislaw Gruszka (1):
      wifi: iwlegacy: replace BUG_ON() with WARN_ON() on num_stations check

Zhao Li (4):
      wifi: mac80211: fix tid_tx use-after-free on BA session stop
      wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames
      wifi: cfg80211: publish PMSR request before starting the driver
      wifi: mac80211: validate individual TWT params before driver setup

 drivers/net/wireless/ath/ath12k/core.c             |   2 +
 drivers/net/wireless/ath/ath12k/core.h             |   3 +
 drivers/net/wireless/ath/ath12k/dp_htt.c           |  49 ++++++
 drivers/net/wireless/ath/ath12k/dp_htt.h           |  12 ++
 drivers/net/wireless/ath/ath12k/dp_peer.c          |  75 +++++++++-
 drivers/net/wireless/ath/ath12k/dp_peer.h          |   2 +
 drivers/net/wireless/ath/ath12k/hw.h               |   2 +
 drivers/net/wireless/ath/ath12k/mac.c              | 165 ++++++++++++++-------
 drivers/net/wireless/ath/ath12k/peer.c             |  31 +++-
 drivers/net/wireless/ath/ath12k/peer.h             |   1 +
 drivers/net/wireless/ath/ath12k/wifi7/hw.c         |  12 ++
 drivers/net/wireless/intel/iwlegacy/common.c       |   7 +-
 drivers/net/wireless/intel/iwlegacy/debug.c        |   2 +-
 .../net/wireless/marvell/mwifiex/11n_rxreorder.c   |   2 +-
 net/mac80211/agg-tx.c                              |   4 +-
 net/mac80211/s1g.c                                 |   4 +
 net/wireless/pmsr.c                                |  22 ++-
 net/wireless/wext-sme.c                            |   9 ++
 18 files changed, 333 insertions(+), 71 deletions(-)