DF-5139
iwm_abort_notification_waits() is dead code: the device stop path never aborts pending notification waits, leaving control threads stalled for their full bounded timeout during firmware stop/restart
Summary
The abort walker is defined+declared but has zero call sites - iwm_stop_device and every fw-restart path never set wait_entry->aborted, so in-flight waiters stall up to their full timeout (<=2*hz) instead of aborting promptly. The upstream iwlwifi design this mirrors invokes the abort on transport stop. Wire-into-stop fix.
Discussion (0)
PoC verification
Evidence pack
findings/poc/DF-5139 Β· 1 files| File | Type | Description | Size | |
|---|---|---|---|---|
| verdict.json | file | 883 B | view raw |
Fix verification
not_testablebaseline noβ patch + rebuild βpatched clean
per-fix-DF-5139
Confirmed kernel references
Detail
Evidence (decisive lines)
static trace in finding markdown
Verified recommended fix
see finding markdown
Verdict
untested (no iwm adapter on audit guest; Info/Low hardening)
No comments yet.