Re: [PATCH net] ath9k_htc: fix possibly missing barrier in ath9k_htc_rxep()

From: Toke Høiland-Jørgensen

Date: Tue Sep 08 2026 - 04:12:02 EST


Thomas Fourier <fourier.thomas@xxxxxxxxx> writes:

> ath9k_rx_init() initialises the rx buffer and its lock then calls a
> memory barrier and then sets the priv->rx.initialized flag. However,
> ath9k_htc_rxep() reads that flag and imidiatly takes the lock. This may
> cause the lock to be taken while not fully initialized.
>
> Add a barrier to prevent speculative read of the lock before checking
> the initized flag.
>
> Fixes: b0ec7e55fce6 ("ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()")
> Cc: <stable@xxxxxxxxxxxxxxx>
> Signed-off-by: Thomas Fourier <fourier.thomas@xxxxxxxxx>

Acked-by: Toke Høiland-Jørgensen <toke@xxxxxxx>