Re: [PATCHv2 ath-next] wifi: ath9k: delete channel-context timers on deinit

From: Jeff Johnson

Date: Mon Oct 05 2026 - 11:15:43 EST



On Fri, 11 Sep 2026 14:31:44 -0700, Rosen Penev wrote:
> ath9k_deinit_channel_context() cancels chanctx_work but does not delete
> the offchannel and sched timers set up by ath9k_init_channel_context().
> If either timer fires after deinit (e.g. during driver unload or
> suspend), it accesses sc->sc_ah which may already be freed by
> ath9k_hw_deinit(), causing a use-after-free.
>
> Delete both timers with timer_shutdown_sync() before cancelling the work
> item.
>
> [...]

Applied, thanks!

[1/1] wifi: ath9k: delete channel-context timers on deinit
commit: 81394dfb9a7905472957628b560ae894eae3a30f

Best regards,
--
Jeff Johnson <jeff.johnson@xxxxxxxxxxxxxxxx>