Re: [PATCH net v3] net/iucv: take a private, writable frame before rewriting it in place

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net.git (main)
by Paolo Abeni <pabeni@xxxxxxxxxx>:

On Wed, 28 Oct 2026 23:47:13 -0500 you wrote:
> From: Bryam Vargas <hexlabsecurity@xxxxxxxxx>
> 
> afiucv_hs_rcv() rewrites the frame in place -- EBCASC() on four name
> fields, then afiucv_swap_src_dest() swaps them and pushes an Ethernet
> header -- and can hand the same skb to dev_queue_xmit(), without making
> it private first, so a packet socket that also gets the frame reads the
> rewritten names. An ETH_P_ALL tap runs first and leaves af_iucv a
> cloned skb; a socket opened for ETH_P_AF_IUCV sits on a ptype_specific
> list, walked after ptype_base[], so deliver_skb() takes a reference and
> af_iucv runs on an skb that is shared but not cloned.
> 
> [...]

Here is the summary with links:
  - [net,v3] net/iucv: take a private, writable frame before rewriting it in place
    https://git.kernel.org/netdev/net/c/f38bce9af9e2

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html