Re: [PATCH] wifi: rtw88: allow key removal when the CAM table is full
From: Luka Gejak
Date: Mon Oct 19 2026 - 15:02:50 EST
October 19, 2026 at 6:51 PM, "Hungyu Lin" <dennylin0707@xxxxxxxxx> wrote:
>
> rtw_ops_set_key() looks for a free CAM entry before checking the
> command. When all pairwise entries are in use, DISABLE_KEY returns
> -ENOSPC without clearing the existing entry.
>
> Move the allocation and bounds check into SET_KEY. DISABLE_KEY uses
> the existing key->hw_key_idx.
>
> Fixes: 10d58823cb44 ("wifi: rtw88: fix out-of-bounds CAM write when key table is full")
> Signed-off-by: Hungyu Lin <dennylin0707@xxxxxxxxx>
> ---
Looking good to me.
Reviewed-by: Luka Gejak <luka.gejak@xxxxxxxxx>
Best regards,
Luka Gejak