Re: [PATCH v4 net] sctp: auth: verify auth requirement when auth_chunk is NULL

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:

On Tue, 21 Jul 2026 09:55:32 +0800 you wrote:
> From: Qing Luo <luoqing@xxxxxxxxxx>
> 
> sctp_auth_chunk_verify() returns true unconditionally when
> chunk->auth_chunk is NULL, silently skipping authentication.
> This is incorrect when:
> 
> 1. skb_clone() failed in the BH receive path, leaving auth_chunk
>    NULL. In sctp_endpoint_bh_rcv() asoc is NULL for new
>    connections, so the early sctp_auth_recv_cid() check cannot
>    catch this.
> 
> [...]

Here is the summary with links:
  - [v4,net] sctp: auth: verify auth requirement when auth_chunk is NULL
    https://git.kernel.org/netdev/net/c/8e04823c120b

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html