From: Jeff Johnson <jeff.johnson@oss.qualcomm.com>
To: linux-wireless@vger.kernel.org,
Johannes Berg <johannes@sipsolutions.net>
Cc: ath10k@lists.infradead.org, ath11k@lists.infradead.org,
ath12k@lists.infradead.org, jjohnson@kernel.org
Subject: pull-request: ath-current-20260713
Date: Mon, 13 Jul 2026 08:35:26 -0700 [thread overview]
Message-ID: <c4207979-e004-43ff-9a11-519302a15f77@oss.qualcomm.com> (raw)
The following changes since commit dc59e4fea9d83f03bad6bddf3fa2e52491777482:
Linux 7.2-rc1 (2026-06-28 12:01:31 -0700)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/ath/ath.git tags/ath-current-20260713
for you to fetch changes up to a1a21995c2e1cc2ca6b2226cfe4f5f018370182a:
wifi: carl9170: fix buffer overflow in rx_stream failover path (2026-07-13 06:55:20 -0700)
----------------------------------------------------------------
ath.git update for v7.2-rc4
The most significant change is to fix an ath12k regression which led
to low MLO RX throughput on WCN7850.
The remainder are an assortment of minor bug fixes spread across many
of the ath drivers.
----------------------------------------------------------------
Cheng Yongkang (1):
wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request
Daniel Hodges (1):
wifi: ath6kl: fix use-after-free in aggr_reset_state()
Dmitry Morgun (1):
wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()
Gaole Zhang (1):
wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin
Jose Ignacio Tornos Martinez (1):
wifi: ath12k: fix NULL pointer dereference in rhash table destroy
Manikanta Pubbisetty (1):
wifi: ath10k: fix skb leak on incomplete msdu during rx pop
Manivannan Sadhasivam (2):
wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET
wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET
Tristan Madani (6):
wifi: ath6kl: fix OOB access from firmware ADDBA window size
wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler
wifi: ath6kl: fix OOB read from firmware IE lengths in connect event
wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read
wifi: carl9170: fix OOB read from off-by-two in TX status handler
wifi: carl9170: fix buffer overflow in rx_stream failover path
Wentao Liang (1):
wifi: ath11k: fix refcount leak in ath11k_ahb_fw_resources_init()
Yingying Tang (1):
wifi: ath12k: Fix low MLO RX throughput on WCN7850
drivers/net/wireless/ath/ath10k/htt_rx.c | 2 ++
drivers/net/wireless/ath/ath11k/ahb.c | 1 +
drivers/net/wireless/ath/ath11k/dp_rx.c | 3 +++
drivers/net/wireless/ath/ath11k/pci.c | 4 ++++
drivers/net/wireless/ath/ath11k/qmi.c | 11 ++++++---
drivers/net/wireless/ath/ath12k/dp_peer.c | 11 +++++++--
drivers/net/wireless/ath/ath12k/dp_peer.h | 1 +
drivers/net/wireless/ath/ath12k/dp_rx.c | 7 +++---
drivers/net/wireless/ath/ath12k/hw.h | 16 +++++++++++++
drivers/net/wireless/ath/ath12k/mac.c | 10 +++++---
drivers/net/wireless/ath/ath12k/pci.c | 4 ++++
drivers/net/wireless/ath/ath12k/peer.c | 3 +++
drivers/net/wireless/ath/ath12k/wifi7/dp_rx.c | 33 +++++++++++++++++++++++++++
drivers/net/wireless/ath/ath12k/wifi7/dp_rx.h | 6 +++++
drivers/net/wireless/ath/ath12k/wifi7/hw.c | 3 +++
drivers/net/wireless/ath/ath6kl/txrx.c | 12 ++++++----
drivers/net/wireless/ath/ath6kl/wmi.c | 20 ++++++++++++++++
drivers/net/wireless/ath/ath9k/hif_usb.c | 7 +-----
drivers/net/wireless/ath/carl9170/rx.c | 7 ++++--
drivers/net/wireless/ath/carl9170/tx.c | 2 +-
20 files changed, 137 insertions(+), 26 deletions(-)
reply other threads:[~2026-07-13 15:35 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=c4207979-e004-43ff-9a11-519302a15f77@oss.qualcomm.com \
--to=jeff.johnson@oss.qualcomm.com \
--cc=ath10k@lists.infradead.org \
--cc=ath11k@lists.infradead.org \
--cc=ath12k@lists.infradead.org \
--cc=jjohnson@kernel.org \
--cc=johannes@sipsolutions.net \
--cc=linux-wireless@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox