Re: [PATCH net] ath9k_htc: fix possibly missing barrier in ath9k_htc_rxep()
From: Toke Høiland-Jørgensen
Date: Tue Sep 08 2026 - 04:12:02 EST
Thomas Fourier <fourier.thomas@xxxxxxxxx> writes:
> ath9k_rx_init() initialises the rx buffer and its lock then calls a
> memory barrier and then sets the priv->rx.initialized flag. However,
> ath9k_htc_rxep() reads that flag and imidiatly takes the lock. This may
> cause the lock to be taken while not fully initialized.
>
> Add a barrier to prevent speculative read of the lock before checking
> the initized flag.
>
> Fixes: b0ec7e55fce6 ("ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep()")
> Cc: <stable@xxxxxxxxxxxxxxx>
> Signed-off-by: Thomas Fourier <fourier.thomas@xxxxxxxxx>
Acked-by: Toke Høiland-Jørgensen <toke@xxxxxxx>