Re: [PATCH net v5 0/2] amt: fix use-after-free of the skb head across pulls

[Jakub Kicinski]

On Sat, 11 Jul 2026 11:19:32 -0400 Michael Bommarito wrote:
> Several AMT receive and transmit paths cache a pointer into the skb head
> and then call a helper that can reallocate that head before the cached
> pointer is used again, so the later access reads or writes freed memory.

Taehee, please review?