Re: [PATCH 2/2] sctp: auth: Fix safety issue when skb_clone fails in auth_chunk handling

[Jakub Kicinski]

On Thu, 16 Jul 2026 14:52:59 +0800 luoqing wrote:
> When processing AUTH + COOKIE-ECHO packets, if skb_clone fails due to
> memory pressure, chunk->auth_chunk is set to NULL but chunk->auth is
> still set to 1. This causes sctp_auth_chunk_verify to skip the AUTH
> validation (since auth_chunk is NULL), allowing unauthenticated
> COOKIE-ECHO packets to be accepted.

Fixes need Fixes tags; do not send patches in replies to existing
threads.