Re: [PATCH net] ppp: fix stale pointer access after pskb_may_pull in ppp_ccp_peek

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net.git (main)
by Dave Miller <davem@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>:

On Fri, 23 Oct 2026 19:53:09 +0000 you wrote:
> From: Tristan Madani <tristan@xxxxxxxxxxxxxxxxxxx>
> 
> ppp_ccp_peek() caches a pointer to skb->data in dp after the first
> pskb_may_pull(), then uses dp after a second pskb_may_pull(skb, len + 2)
> in the CCP_CONFACK handler. If the second pull triggers
> pskb_expand_head() due to a cloned skb or frag linearization,
> skb->head is freed and reallocated, leaving dp stale.
> 
> [...]

Here is the summary with links:
  - [net] ppp: fix stale pointer access after pskb_may_pull in ppp_ccp_peek
    https://git.kernel.org/netdev/net/c/1e860f42f41c

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html