pull-request: ath-current-20260713

pull-request: ath-current-20260713

[Jeff Johnson]

The following changes since commit dc59e4fea9d83f03bad6bddf3fa2e52491777482:

  Linux 7.2-rc1 (2026-06-28 12:01:31 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/ath/ath.git tags/ath-current-20260713

for you to fetch changes up to a1a21995c2e1cc2ca6b2226cfe4f5f018370182a:

  wifi: carl9170: fix buffer overflow in rx_stream failover path (2026-07-13 06:55:20 -0700)

----------------------------------------------------------------
ath.git update for v7.2-rc4

The most significant change is to fix an ath12k regression which led
to low MLO RX throughput on WCN7850.

The remainder are an assortment of minor bug fixes spread across many
of the ath drivers.

----------------------------------------------------------------
Cheng Yongkang (1):
      wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request

Daniel Hodges (1):
      wifi: ath6kl: fix use-after-free in aggr_reset_state()

Dmitry Morgun (1):
      wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get()

Gaole Zhang (1):
      wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin

Jose Ignacio Tornos Martinez (1):
      wifi: ath12k: fix NULL pointer dereference in rhash table destroy

Manikanta Pubbisetty (1):
      wifi: ath10k: fix skb leak on incomplete msdu during rx pop

Manivannan Sadhasivam (2):
      wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET
      wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET

Tristan Madani (6):
      wifi: ath6kl: fix OOB access from firmware ADDBA window size
      wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler
      wifi: ath6kl: fix OOB read from firmware IE lengths in connect event
      wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read
      wifi: carl9170: fix OOB read from off-by-two in TX status handler
      wifi: carl9170: fix buffer overflow in rx_stream failover path

Wentao Liang (1):
      wifi: ath11k: fix refcount leak in ath11k_ahb_fw_resources_init()

Yingying Tang (1):
      wifi: ath12k: Fix low MLO RX throughput on WCN7850

 drivers/net/wireless/ath/ath10k/htt_rx.c      |  2 ++
 drivers/net/wireless/ath/ath11k/ahb.c         |  1 +
 drivers/net/wireless/ath/ath11k/dp_rx.c       |  3 +++
 drivers/net/wireless/ath/ath11k/pci.c         |  4 ++++
 drivers/net/wireless/ath/ath11k/qmi.c         | 11 ++++++---
 drivers/net/wireless/ath/ath12k/dp_peer.c     | 11 +++++++--
 drivers/net/wireless/ath/ath12k/dp_peer.h     |  1 +
 drivers/net/wireless/ath/ath12k/dp_rx.c       |  7 +++---
 drivers/net/wireless/ath/ath12k/hw.h          | 16 +++++++++++++
 drivers/net/wireless/ath/ath12k/mac.c         | 10 +++++---
 drivers/net/wireless/ath/ath12k/pci.c         |  4 ++++
 drivers/net/wireless/ath/ath12k/peer.c        |  3 +++
 drivers/net/wireless/ath/ath12k/wifi7/dp_rx.c | 33 +++++++++++++++++++++++++++
 drivers/net/wireless/ath/ath12k/wifi7/dp_rx.h |  6 +++++
 drivers/net/wireless/ath/ath12k/wifi7/hw.c    |  3 +++
 drivers/net/wireless/ath/ath6kl/txrx.c        | 12 ++++++----
 drivers/net/wireless/ath/ath6kl/wmi.c         | 20 ++++++++++++++++
 drivers/net/wireless/ath/ath9k/hif_usb.c      |  7 +-----
 drivers/net/wireless/ath/carl9170/rx.c        |  7 ++++--
 drivers/net/wireless/ath/carl9170/tx.c        |  2 +-
 20 files changed, 137 insertions(+), 26 deletions(-)