Re: [PATCH net v3] tipc: fix NULL deref in tipc_lxc_xmit() on node up

[Jakub Kicinski]

On Thu,  9 Jul 2026 07:47:19 -0700 Weiming Shi wrote:
> tipc_named_node_up() builds a bulk of this node's cluster-scope service
> bindings for a peer that just came up and sends it with tipc_node_xmit().
> Neither step tolerates an empty skb chain: named_distribute() finishes
> with buf_msg(skb_peek_tail(list)) to tag the last message, and for a
> same-host peer tipc_node_xmit() routes into tipc_lxc_xmit(), which reads
> buf_msg(skb_peek(list)). skb_peek*() returns NULL on an empty chain, so
> buf_msg(NULL) faults.

This patch has been sitting in PW for 2 weeks, due to maintainers being
on vacation. Please repost if it's still relevant.
-- 
pw-bot: defer