Re: [PATCH net v3] tipc: fix NULL deref in tipc_lxc_xmit() on node up

[Weiming Shi]

Jakub Kicinski <kuba@xxxxxxxxxx> 于2026年7月22日周三 02:59写道：
>
> On Thu,  9 Jul 2026 07:47:19 -0700 Weiming Shi wrote:
> > tipc_named_node_up() builds a bulk of this node's cluster-scope service
> > bindings for a peer that just came up and sends it with tipc_node_xmit().
> > Neither step tolerates an empty skb chain: named_distribute() finishes
> > with buf_msg(skb_peek_tail(list)) to tag the last message, and for a
> > same-host peer tipc_node_xmit() routes into tipc_lxc_xmit(), which reads
> > buf_msg(skb_peek(list)). skb_peek*() returns NULL on an empty chain, so
> > buf_msg(NULL) faults.
>
> This patch has been sitting in PW for 2 weeks, due to maintainers being
> on vacation. Please repost if it's still relevant.
> --
> pw-bot: defer

Hi Jakub,

Thanks for the ping. This is already being actively worked in another thread:

https://lore.kernel.org/all/GV1P189MB1988CB4E92D2BDFB80894B4BC6C22@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/

No need to repost this v3 separatel.

Thanks,
Weiming