Re: [PATCH wireless-next 2/3] wifi: nxpwifi: free the aggregation buffer when the RA list disappears

[Jeff Chen]

On Thu, Aug 13, 2026 at 04:23:14 PM +0800, Linmao Li wrote:
> nxpwifi_11n_aggregate_pkt() drops ra_list_spinlock while it copies each
> subframe, so it rechecks the RA list after taking the lock again.  The
> check inside the aggregation loop returns without releasing the
> skb_aggr it has been filling, leaking one tx_buf_size buffer along with
> the subframes already aggregated into it.
> 

Reviewed-by: Jeff Chen <jeff.chen_1@xxxxxxx>