Re: [PATCH net 1/2] octeontx2-pf: fix skb use-after-free on ipsec transmit drop

[Ratheesh Kannoth]

On 2026-10-28 at 01:24:06, Nicolai Buchwitz (nb@xxxxxxxxxxx) wrote:
> When an SA is removed while packets for it are still queued, the
> transmit path frees the packet but reports the queue as busy. The stack
> then requeues the freed skb, and the DMA mappings leak.
>
> Fixes: 6a77a158848a ("cn10k-ipsec: Process outbound ipsec crypto offload")
> Signed-off-by: Nicolai Buchwitz <nb@xxxxxxxxxxx>

Reviewed-by: Ratheesh Kannoth <rkannoth@xxxxxxxxxxx>