[PATCH net v3] rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present

Jakub Kicinski kuba at kernel.org
Sun May 10 08:45:20 PDT 2026


On Fri, 8 May 2026 17:53:09 +0900 Hyunwoo Kim wrote:
>  			    sp->hdr.securityIndex != 0 &&
> -			    skb_cloned(skb)) {
> +			    (skb_cloned(skb) ||
> +			     skb_has_frag_list(skb) ||
> +			     skb_has_shared_frag(skb))) {

We seem to be getting a lot of fixes for this issue, and this one is
incorrect :| Writing to _any_ frags is incorrect. You have to copy
if skb is not linear. skb_ensure_writable()



More information about the linux-afs mailing list