Re: [PATCH net v3] octeontx2-pf: fix skb use-after-free with ipsec crypto offload

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net.git (main)
by Paolo Abeni <pabeni@xxxxxxxxxx>:

On Tue, 27 Oct 2026 19:44:09 +0100 you wrote:
> otx2_dma_map_skb_frag() calls skb_unclone_full() on its own copy of the
> skb pointer. For a cloned skb, for example with tcpdump running on the
> interface, this frees the skb and the new copy is lost on return. The
> transmit path then uses the freed skb and the copy leaks.
> 
> Make the skb writable in place in otx2_sq_append_skb() instead, so the
> pointer stays valid. Also do this for nonlinear skbs, as the hardware
> writes the encrypted data back into the frags, which may be shared,
> for example with the TCP retransmit queue.
> 
> [...]

Here is the summary with links:
  - [net,v3] octeontx2-pf: fix skb use-after-free with ipsec crypto offload
    https://git.kernel.org/netdev/net/c/829a09df899d

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html