Johannes Berg [off-list ref] writes:
From: Jouni Malinen <redacted>
mac80211 used to check port authorization in the Data frame enqueue case
when going through start_xmit(). However, that authorization status may
change while the frame is waiting in a queue. Add a similar check in the
dequeue case to avoid sending previously accepted frames after
authorization change. This provides additional protection against
potential leaking of frames after a station has been disconnected and
the keys for it are being removed.
Cc: stable@vger.kernel.org
Signed-off-by: Jouni Malinen <redacted>
Signed-off-by: Johannes Berg <redacted>
Ah - nice find!
Acked-by: Toke Høiland-Jørgensen <redacted>