Re: [PATCH net v5 0/2] amt: fix use-after-free of the skb head across pulls

[patchwork-bot+netdevbpf]

Hello:

This series was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:

On Sat, 11 Jul 2026 11:19:32 -0400 you wrote:
> Several AMT receive and transmit paths cache a pointer into the skb head
> and then call a helper that can reallocate that head before the cached
> pointer is used again, so the later access reads or writes freed memory.
> 
> Patch 1 walks every AMT path and, for each pointer used after a
> reallocating call, either snapshots the value before the first pull or
> re-derives the pointer after the last one.
> 
> [...]

Here is the summary with links:
  - [net,v5,1/2] amt: re-read skb header pointers after every pull
    https://git.kernel.org/netdev/net/c/3656a79f94c4
  - [net,v5,2/2] amt: make the head writable before rewriting the L2 header
    https://git.kernel.org/netdev/net/c/53969d704fa5

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html