pull-request: nxpwifi-fixes-20261006-v2

pull-request: nxpwifi-fixes-20261006-v2

[jeff.chen_1]

The following changes since commit d24e8ac715de2e16a53c144005b1863660a5fbea:

  Merge tag 'net-7.3-rc6' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net (2026-10-01 06:41:59 -0700)

are available in the Git repository at:

  https://github.com/nxp-upstream/nxpwifi-next.git tags/nxpwifi-fixes-20261006-v2

for you to fetch changes up to 5e99bdb94720331e2fd38c10c5b1afa1ce640835:

  wifi: nxpwifi: do not delete Rx reorder entries under RCU (2026-10-06 21:13:54 +0800)

----------------------------------------------------------------
nxpwifi updates for 7.3

This update contains fixes for station list synchronization,
aggregation and reorder buffer cleanup, authentication frame
handling, and several memory safety issues.

Highlights:
- fix concurrent sta_list add/delete races
- clean up station entries on uAP deauthentication
- fix Tx BA stream entry deletion logic
- avoid deleting Rx reorder entries under RCU
- improve aggregation buffer cleanup
- fix authentication frame length validation
- handle authentication frame allocation failures
- fix wakeup timer shutdown ordering

----------------------------------------------------------------
David Carlier (2):
      wifi: nxpwifi: fix inverted check in Tx BA stream entry deletion
      wifi: nxpwifi: do not delete Rx reorder entries under RCU

Linmao Li (7):
      wifi: nxpwifi: protect sta_list against concurrent add and delete
      wifi: nxpwifi: delete the station entry on the uAP deauth event
      wifi: nxpwifi: wait for the wakeup timer before the adapter is freed
      wifi: nxpwifi: free the aggregation buffer when the RA list disappears
      wifi: nxpwifi: zero the channel statistics array
      wifi: nxpwifi: fix the authentication frame length handling
      wifi: nxpwifi: handle authentication frame allocation failures

 drivers/net/wireless/nxp/nxpwifi/11n.c           |  2 +-
 drivers/net/wireless/nxp/nxpwifi/11n_aggr.c      |  1 +
 drivers/net/wireless/nxp/nxpwifi/11n_rxreorder.c | 11 +++++----
 drivers/net/wireless/nxp/nxpwifi/cfg80211.c      | 31 ++++++++++++++++++------
 drivers/net/wireless/nxp/nxpwifi/init.c          |  2 +-
 drivers/net/wireless/nxp/nxpwifi/main.c          |  4 +--
 drivers/net/wireless/nxp/nxpwifi/uap_event.c     |  1 +
 drivers/net/wireless/nxp/nxpwifi/util.c          |  8 ++++--
 8 files changed, 42 insertions(+), 18 deletions(-)