Re: [PATCH wpan v3] mac802154: fix use-after-free of sdata via queued RX frames

From: Miquel Raynal

Date: Wed Jul 29 2026 - 05:03:00 EST


Hi Ibrahim,

> Fixes: 57588c71177f ("mac802154: Handle passive scanning")
> Cc: stable@xxxxxxxxxxxxxxx
> Signed-off-by: Ibrahim Hashimov <security@xxxxxxxxxxxx>
> Assisted-by: AuditCode-AI:2026.07
> ---

This whole change makes things clearly less and less readable, but I
don't easily see any possible simplification.

Reviewed-by: Miquel Raynal <miquel.raynal@xxxxxxxxxxx>

If you are willing to fix another possible leak, you can check Sashiko's
feedback agout skb_get() which is likely leaked since down the stack we
clone it and not consume it.

Thanks,
Miquèl