Re: [PATCH] wifi: rtw88: allow key removal when the CAM table is full
From: Ping-Ke Shih
Date: Mon Nov 02 2026 - 22:35:32 EST
Hungyu Lin <dennylin0707@xxxxxxxxx> wrote:
> rtw_ops_set_key() looks for a free CAM entry before checking the
> command. When all pairwise entries are in use, DISABLE_KEY returns
> -ENOSPC without clearing the existing entry.
>
> Move the allocation and bounds check into SET_KEY. DISABLE_KEY uses
> the existing key->hw_key_idx.
>
> Fixes: 10d58823cb44 ("wifi: rtw88: fix out-of-bounds CAM write when key table is full")
> Signed-off-by: Hungyu Lin <dennylin0707@xxxxxxxxx>
> Reviewed-by: Luka Gejak <luka.gejak@xxxxxxxxx>
> Acked-by: Ping-Ke Shih <pkshih@xxxxxxxxxxx>
> Tested-by: Imtiyaz Parvez <reza1234khan1234@xxxxxxxxx>
> Tested-by: Imtiyaz Parvez <reza1234khan1234@xxxxxxxxx>
1 patch(es) applied to rtw-next branch of rtw.git, thanks.
b60ee9891e40 wifi: rtw88: allow key removal when the CAM table is full
---
https://github.com/pkshih/rtw.git